Source Code Analysis Tools - Java, JavaScript, .NET, PHP, Python, Ruby
.NET Source Code Analysis Tools (open source and commercial)
DrivenMetrics is a metrics library to be used with your .net project. It is used to help with determining the quality of your code by measuring certain attributes or metrics.
FxCop is a code analysis tool that checks .NET managed code assemblies for conformance to the Microsoft .NET Framework Design Guidelines. It uses MSIL parsing, and callgraph analysis to inspect assemblies for more than 200 defects.
Gendarme is a extensible rule-based tool to find problems in .NET applications and libraries. Gendarme inspects programs and libraries that contain code in ECMA CIL format (Mono and .NET) and looks for common problems with the code, problems that compiler do not typically check or have not historically checked.
McCabe IQ Developers Edition objectively measures software quality through advanced static analysis and visualizes the architecture, highlighting the most complex areas of the code base to identify bugs and security vulnerabilities. McCabe IQ Test Team Edition provides comprehensive test / code coverage to focus, monitor, and document software testing processes. McCabe IQ Test Team Edition accurately assesses the thoroughness of your testing and aids in gauging the time and resources needed to ensure a well-tested application. McCabe IQ Enterprise Edition provides all the functionality of the Developers and Test Team Editions. In addition, it provides the robust enterprise reporting, advanced reengineering capabilities, change analysis, and secure web-enabled test data collection.
NDepend is a tool that simplifies managing a complex .NET code base. Architects and developers can analyze code structure, specify design rules, plan massive refactoring, do effective code reviews and master evolution by comparing different versions of the code.
Prefix is a free Java and .NET dynamic source code analyzer. You can use Prefix every day while you are writing and testing your code to validate the behavior of your code, find hidden exceptions in your code, identify slow SQL queries and N+1 problems, review the performance of your code.
PVS-Studio is a tool for detecting bugs and security weaknesses in the source code of programs, written in C, C++, C# and Java. It works under 64-bit systems in Windows, Linux and macOS environments, and can analyze source code intended for 32-bit, 64-bit and embedded ARM platforms. PVS-Studio performs static code analysis and generates a report that helps a programmer find and fix bugs. PVS-Studio performs a wide range of code checks, and it is also useful in finding misprints and Copy-Paste errors. PVS-Studio is integrated with Visual Studio 2010-2019 development environment.
Diagrammer for .Net Assemblies, also support for Javascript. Good for assembly dependencies. Good for showing the call graph in complex methods. Good for showing the jumps in IL. Good for getting an overview of where the complex parts of a system are.
Software Change Management "Where Used" Scanner
FindItEZ ( pronounced "find it easy" ) is a "where used" developer tool for improved change management on large software projects. It cuts impact analysis time, improves change estimate accuracy and aids in preemptive quality assurance by quickly scanning all common source code files & database objects in a single tool.
Solid TA Software Evolution Trend Analyzer
The Solid Trend Analyzer is a standalone, non-intrusive solution for monitoring and investigating software trends. SolidTA uses a number of proprietary and standard metric analyses to assess the evolution of software quality indicators for industry-size code versioning repositories. SolidTA presents the analyses results in an intuitive way to enable users to discover trend correlations and make fact-based informed decisions. Overviews of team activity or system metrics can be produced in minutes. No repository management expertise is required.
The Software Explorer (SolidSX) is a standalone Windows application that gives insight in large software systems. SolidSX creates high-quality visualizations that simultaneously shows the structure, dependencies, metrics on all types of source code elements (files, classes, methods, fields, etc.). By using hardware-accelerated graphics, SolidSX is able to display large amounts of information in a clear and concise manner and provides fast and easy exploration through large source codes. SolidSX extracts dependencies and metrics from Microsoft .NET assemblies. This means that SolidSX supports all of the .NET programming languages, such as C#, Visual Basic, and Visual C++ (managed). We plan to add support for the Java programming language in an upcoming version.