Search Result for Static Analysis

Pretty print the result of Android lint tool. Would work great when you run lint as part of continuous integration flow.

Meet detekt, a static code analysis tool for the Kotlin programming language. It operates on the abstract syntax tree provided by the Kotlin compiler.

Hopper is a goal-directed static analysis tool for languages that run on the JVM. It is a much-improved and more feature-full version of Thresher written in Scala rather than Java.

An example project with SonarQube integration for proper code review and code structuring.

Soot is a Java optimization framework. It provides four intermediate representations for analyzing and transforming Java bytecode:

• Baf: a streamlined representation of bytecode which is simple to manipulate.
• Jimple: a typed 3-address intermediate representation suitable for optimization.
• Shimple: an SSA variation of Jimple.
• Grimp: an aggregated version of Jimple suitable for decompilation and code inspection.

This project adds gradle setup for quality tools like CheckStyle, FindBugs, PMD and Lint to Android project via shell script. After adding this, we can easily increase quality of the project by static code analysis.

An anti-bikeshedding Kotlin linter with built-in formatter.

This is an extension for Android Lint. Rock your Android.

Custom Lint checks for Android development.

A basic, Gradle-based project template for writing custom Android Lint rules.

Quick Android Review Kit - This tool is designed to look for several security related Android application vulnerabilities, either in source code or packaged APKs. The tool is also capable of creating "Proof-of-Concept" deployable APKs and/or ADB commands, capable of exploiting many of the vulnerabilities it finds. There is no need to root the test device, as this tool focuses on vulnerabilities that can be exploited under otherwise secure conditions.

Prettier display of Android Lint issues.

Infer is a static analysis tool for Java, Objective-C and C, written in OCaml.

Catch common Java mistakes as compile-time errors.

ApkAnalyser is a static, virtual analysis tool for examining and validating the development work of your Android app. It's a complete tool chain which supports modification of the binary application with more printouts.

You are then able to repack, install, run and verify the result from logcat. ApkAnalyser also supports resource analysis, and you can decode XML, look up resource references and detect potential issues in your app.

APKinspector is a powerful GUI tool for analysts to analyze the Android applications.

Smali Control Flow Graph's.

Androwarn is a tool whose main aim is to detect and warn the user about potential malicious behaviors developed by an Android application.

The detection is performed with the static analysis of the application's Dalvik bytecode, represented as Smali.

This analysis leads to the generation of a report, according to a technical detail level chosen from the user.

PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It supports Java, JavaScript, XML, XSL.

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. It automates the process of checking Java code to spare humans of this boring (but important) task.