A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

Continuous Inspection

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

Catch common Java mistakes as compile-time errors

The modern Java bytecode editor

An extensible multilanguage static code analyzer.

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

Soot - A Java optimization framework

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

Spoon is a metaprogramming library to analyze and transform Java source code. 🥄 is made with ❤️, 🍻 and ✨. It parses source files to build a well-designed AST with powerful analysis and transformation API.

Jar Analyzer - 一个 JAR 包 GUI 分析工具，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JVM 栈帧分析，自定义表达式搜索。官方文档：https://docs.qq.com/doc/DV3pKbG9GS0pJS0tk

An easy-to-learn/use static analysis framework for Java

An Android base app with loads of cool libraries/configuration NOT MAINTAINED

A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)

PySonar2: a semantic indexer for Python with interprocedual type inference

Tai-e assignments for static program analysis

☕ SonarSource Static Analyzer for Java Code Quality and Security

FlowDroid Static Data Flow Tracker

建议使用新版：https://github.com/jar-analyzer/jar-analyzer