Static program analysis (or static analysis) is the analysis of computer programs performed without executing them, in contrast with dynamic program analysis, which is performed on programs during their execution.
Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
An extensible multilanguage static code analyzer.
A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.
A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)
☕ SonarSource Static Analyzer for Java Code Quality and Security
T.J. Watson Libraries for Analysis, with frontends for Java, Android, and JavaScript, and may common static program analyses
Jackhammer - One Security vulnerability assessment/management tool to solve all the security team problems.
A new version of Soot with a completely overhauled architecture
Droidefense: Advance Android Malware Analysis Framework
🐘 SonarPHP: PHP static analyzer for SonarQube & SonarLint
Jenkins Warnings Plugin - Next Generation
Policeman's Forbidden API Checker
☕️ PMD Plugin for SonarQube
Static code review for your Gerrit patchsets. Runs Checkstyle, PMD, FindBugs, Scalastyle, CodeNarc, JSLint for you!
Type Analyzer for JavaScript
Static code analysis for CFML (a linter)
a FindBugs/SpotBugs plugin for doing static code analysis for java code bases
walkmod: an open source tool to fix coding style issues
Java library for parsing report files from static code analysis.