Cppcheck VS lgtm.com

• Open Source
  Cppcheck is open-source software, which means it is free to use and its source code is available for modification and distribution under the terms of the GNU General Public License.
• Static Analysis
  Cppcheck excels at performing static code analysis, detecting bugs, memory leaks, and potential issues in C and C++ code without executing the program.
• Wide Platform Support
  Cppcheck supports a wide range of platforms, including Windows, Linux, and macOS, making it versatile and accessible to developers on different operating systems.
• Integrated with IDEs
  Cppcheck can be integrated with popular Integrated Development Environments (IDEs) like Visual Studio, Eclipse, and Code::Blocks, providing seamless code analysis during development.
• Customizable
  Cppcheck allows customization of its analysis through command-line options and configurations, enabling users to tailor the tool to their specific needs and project requirements.
• Extensive Reporting
  Cppcheck provides detailed reports that highlight various types of issues, making it easier for developers to identify and resolve problems efficiently.
• Regular Updates
  Cppcheck is actively maintained, with regular updates and improvements that enhance its capabilities and address any newly discovered issues.

Possible disadvantages

• False Positives
  Cppcheck may sometimes produce false positives, flagging issues that are not actually problematic, which can lead to unnecessary debugging efforts.
• Learning Curve
  New users may encounter a learning curve when first using Cppcheck, as they need to understand its configuration options and how to interpret its output effectively.
• Limited Dynamic Analysis
  Cppcheck focuses on static analysis and does not provide dynamic analysis capabilities, which means it cannot detect issues that only occur at runtime.
• Performance Overhead
  Running Cppcheck on large codebases can introduce performance overhead, potentially slowing down the development process if not managed properly.
• Complex Configuration
  For complex projects, configuring Cppcheck to ignore certain false positives or to focus on specific types of issues can be challenging and time-consuming.

• Automated Code Review
  LGTM.com provides automated code reviews, offering deep semantic analysis of code which helps in identifying bugs, vulnerabilities, and other issues early in the development process.
• Multi-language Support
  LGTM.com supports multiple programming languages, including Java, JavaScript, Python, C++, and C#, allowing teams with diverse codebases to use one tool for all their projects.
• Integrations
  It integrates with popular platforms like GitHub and Bitbucket, allowing seamless operation within existing workflows and continuous integration pipelines.
• Database of Queries
  Users have access to a large database of customizable queries written in QL, which helps in tailoring the analysis to fit specific needs and discovering new patterns and issues.
• Free for Open Source
  LGTM.com is free for open-source projects, making it an attractive option for many open-source communities looking to enhance their code quality without incurring costs.

Possible disadvantages

• Learning Curve for QL
  The use of QL for customizing analyses can have a steep learning curve for users unfamiliar with this language, potentially requiring additional time and effort to master.
• Performance Overhead
  The analysis can be resource-intensive, potentially slowing down builds or consuming significant computational resources, especially for large codebases.
• Limited Offline Support
  LGTM.com primarily operates as a cloud-based service, limiting offline use or self-hosted scenarios, which may be a consideration for teams with specific privacy or compliance requirements.
• Dependency on Internet Connection
  Its reliance on internet connectivity may pose an issue for developers in regions with unstable internet access, affecting productivity.
• Platform-specific Limitations
  Some functionalities might be optimized or limited based on the particular platform integration, potentially requiring different configurations for distinct environments.

No analysis of lgtm.com yet.

Cppcheck

More videos

No lgtm.com videos yet. You could help us improve this page by suggesting one.

• Top 9 C++ Static Code Analysis Tools
  www.incredibuild.com · Jun 2021

  Cppcheck is a popular, open-source, free, cross-platform static code analysis tool dedicated to C and C++. It is known for being easy to use and its simplicity is one of its pros. To get started with it you don’t have...

We have no reviews of lgtm.com yet. Be the first one to post

• Configuring Cppcheck, Cpplint, and JSON Lint

  I dedicated Sunday morning to going over the documentation of the linters we use in the project. The goal was to understand all options and use them in the best way for our project. Seeing their manuals side by side was nice because even... - Source: dev.to / over 2 years ago

• Enforcing Memory Safety?

  Using infer, someone else exploited null-dereference checks to introduce simple affine types in C++. Cppcheck also checks for null-dereferences. Unfortunately, that approach means that borrow-counting references have a larger sizeof than... Source: over 3 years ago

• Static Code analysis

  For my own projects, I used cppcheck. You can check out that tool to get a feel. Depending on what industry your in, you might need to follow a standard like Misra. Source: over 3 years ago

View more

• free-for.dev

  Lgtm.com — Continuous security analysis for Java, Python, JavaScript, TypeScript, C#, C and C++, free for Open Source. - Source: dev.to / almost 4 years ago

• Good code analyzer for Svelte? (like LGTM)

  I use LGTM for less code smells in my open source projects. But seems like it doesn't support Svelte. Is there any good one out there? Source: almost 5 years ago

• Free for dev - list of software (SaaS, PaaS, IaaS, etc.)

  Lgtm.com — Continuous security analysis for Java, Python, JavaScript, TypeScript, C#, C and C++, free for Open Source. - Source: dev.to / about 5 years ago