🔍 ScanCode detects licenses, copyrights, dependencies by "scanning code" ... to discover and inventory open source and third-party packages used in your code. Sponsored by NLnet project https://nln…

A static code analyzer for C++, C#, Lua

Scalpel: The Python Static Analysis Framework

Kythe is a pluggable, (mostly) language-agnostic ecosystem for building tools that work with code.

Google's Engineering Practices documentation

Sloc, Cloc and Code: scc is a very fast accurate code counter with complexity calculations and COCOMO estimates written in pure Go

Augur v2 - Prediction Market Protocol and Client

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

Vulnerability scanner written in Go which uses the data provided by https://osv.dev