SonarQube is a continuous inspection platform for automated static code analysis, quality gates, and security findings across many programming languages in CI/CD workflows.

11k stars2.2k forksLGPL-3.0last commit Actively maintained
DeepSource is a cloud code-quality platform that performs automated static analysis of source code in Git repositories, detecting bugs, security issues, and style problems. It provides reports, autofix suggestions, CI/merge-request integrations and analytics.
SonarQube is a continuous inspection platform for automated static code analysis, quality gates, and security findings across many programming languages in CI/CD workflows.

11k stars2.2k forksLGPL-3.0last commit Actively maintained
Every option on this page is open source and free to run on your own hardware, so you own the data and there is no subscription to cancel. 1 of 1 shipped a commit in the last six months. Licences in this list: LGPL-3.0. In exchange you take on hosting, backups and updates yourself.
Browse everything in Code Quality & Static Analysis.