lgtm.com VS VisualCodeGrepper

• Automated Code Review
  LGTM.com provides automated code reviews, offering deep semantic analysis of code which helps in identifying bugs, vulnerabilities, and other issues early in the development process.
• Multi-language Support
  LGTM.com supports multiple programming languages, including Java, JavaScript, Python, C++, and C#, allowing teams with diverse codebases to use one tool for all their projects.
• Integrations
  It integrates with popular platforms like GitHub and Bitbucket, allowing seamless operation within existing workflows and continuous integration pipelines.
• Database of Queries
  Users have access to a large database of customizable queries written in QL, which helps in tailoring the analysis to fit specific needs and discovering new patterns and issues.
• Free for Open Source
  LGTM.com is free for open-source projects, making it an attractive option for many open-source communities looking to enhance their code quality without incurring costs.

Possible disadvantages

• Learning Curve for QL
  The use of QL for customizing analyses can have a steep learning curve for users unfamiliar with this language, potentially requiring additional time and effort to master.
• Performance Overhead
  The analysis can be resource-intensive, potentially slowing down builds or consuming significant computational resources, especially for large codebases.
• Limited Offline Support
  LGTM.com primarily operates as a cloud-based service, limiting offline use or self-hosted scenarios, which may be a consideration for teams with specific privacy or compliance requirements.
• Dependency on Internet Connection
  Its reliance on internet connectivity may pose an issue for developers in regions with unstable internet access, affecting productivity.
• Platform-specific Limitations
  Some functionalities might be optimized or limited based on the particular platform integration, potentially requiring different configurations for distinct environments.

• Open Source
  VisualCodeGrepper is open source, allowing developers to modify and improve the tool according to their needs and ensuring transparency in its operations.
• Multi-language Support
  The tool supports multiple programming languages such as C++, C#, Java, JavaScript, and more, making it versatile for developers working in different environments.
• User-friendly Interface
  It features a simple and intuitive interface that makes it easier for users to navigate and utilize its capabilities effectively without a steep learning curve.
• Static Code Analysis
  VisualCodeGrepper performs static code analysis helping identify potential security vulnerabilities without needing to execute the code.

Possible disadvantages

• Limited Advanced Features
  Compared to other more comprehensive security analysis tools, VisualCodeGrepper may lack advanced features needed for in-depth analysis.
• Outdated Information
  As an open-source tool primarily maintained by the community, it might suffer from a lack of regular updates, leading to outdated security vulnerability databases.
• False Positives
  Users might encounter false positives, where the tool flags non-vulnerable code as a security risk, necessitating manual verification.
• Limited Scalability
  The tool may not be suitable for analyzing extremely large codebases efficiently, limiting its utility in large-scale projects.

• free-for.dev

  Lgtm.com — Continuous security analysis for Java, Python, JavaScript, TypeScript, C#, C and C++, free for Open Source. - Source: dev.to / almost 4 years ago

• Good code analyzer for Svelte? (like LGTM)

  I use LGTM for less code smells in my open source projects. But seems like it doesn't support Svelte. Is there any good one out there? Source: almost 5 years ago

• Free for dev - list of software (SaaS, PaaS, IaaS, etc.)

  Lgtm.com — Continuous security analysis for Java, Python, JavaScript, TypeScript, C#, C and C++, free for Open Source. - Source: dev.to / about 5 years ago

Tracking VisualCodeGrepper since Mar 2021.