Splint
Coverity Scan
Cppcheck
SonarQube
PVS-Studio
Flawfinder
Clang Static Analyzer
Checkmarx
lgtm.com
Cppcheck
Clang Static Analyzer
Parasoft C/C++test
LDRA Testbed
Polyspace
VisualCodeGrepper
Perforce Helix QAC
SplintNo lgtm.com videos yet. You could help us improve this page by suggesting one.
Based on our record, Splint should be more popular than lgtm.com. It has been mentiond 9 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
Whenever I see people talk about the portability or compatibility advantages of C, I'm reminded of how "even C isn't compatible with C", because you typically aren't talking about up-to-date GCC or LLVM on these niche platforms... you're talking about some weird or archaic vendor-provided compiler... Possibly with syntax extensions that static analyzers like splint will choke on. (Splint can't even understand near... Source: about 1 year ago
Huh. I think I actually needed to use the equivalent position for certain splint annotations in my C retro-hobby project. Source: about 1 year ago
I often like to say that Rust's bindings are a way to trick people into writing the compile-time safety annotations that they didn't want to write for things like splint. (Seriously. Look into how much splint is capable of checking with the correct annotations.). Source: over 1 year ago
Linters like Splint [0] can do that for C. I’m not saying that Rust’s built-in approach isn’t better, but please be careful about what exactly you claim. [0] http://splint.org/. - Source: Hacker News / over 1 year ago
(Sort of like how, for my DOS hobby project, I use splint to require explicit casts between typedefs so I can use the newtype pattern without having to manually reach into wrapper struct fields in places that don't do conversions.). Source: over 1 year ago
Lgtm.com — Continuous security analysis for Java, Python, JavaScript, TypeScript, C#, C and C++, free for Open Source. - Source: dev.to / over 1 year ago
I use LGTM for less code smells in my open source projects. But seems like it doesn't support Svelte. Is there any good one out there? Source: over 2 years ago
Lgtm.com — Continuous security analysis for Java, Python, JavaScript, TypeScript, C#, C and C++, free for Open Source. - Source: dev.to / over 2 years ago
Coverity Scan - Find and fix defects in your Java, C/C++ or C# open source project for free
Cppcheck - Cppcheck is an analysis tool for C/C++ code. It detects the types of bugs that the compilers normally fail to detect. The goal is no false positives. CppCheckDownload cppcheck for free.
Clang Static Analyzer - The Clang Static Analyzer is a source code analysis tool that finds bugs in C, C++, and Objective-C...
SonarQube - SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.
Parasoft C/C++test - Ensure compliance with a variety of functional safety, security, and coding standards in embedded C/C++ software.
PVS-Studio - PVS-Studio is a useful piece of software for detecting problems in source code. The software examines program codes written in C, C++, and C# for any problems that might prohibit the code from functioning properly.
