A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

Continuous Inspection

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

Catch common Java mistakes as compile-time errors

The modern Java bytecode editor

An extensible multilanguage static code analyzer.

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

Soot - A Java optimization framework

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

Spoon is a metaprogramming library to analyze and transform Java source code. 🥄 is made with ❤️, 🍻 and ✨. It parses source files to build a well-designed AST with powerful analysis and transformation API.

An Android base app with loads of cool libraries/configuration NOT MAINTAINED

An easy-to-learn/use static analysis framework for Java

A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)

PySonar2: a semantic indexer for Python with interprocedual type inference

Jar Analyzer - 一个JAR包分析工具，批量分析，SCA漏洞分析，方法调用关系搜索，字符串搜索，Spring组件分析，信息泄露检查，CFG程序分析，JVM栈帧分析，进阶表达式搜索，字节码指令级的动态调试分析，反编译JAR包一键导出，一键提取序列化数据恶意代码，一键分析BCEL字节码

☕ SonarSource Static Analyzer for Java Code Quality and Security

Tai-e assignments for static program analysis

FlowDroid Static Data Flow Tracker

建议使用新版：https://github.com/jar-analyzer/jar-analyzer