Open Source Java Source Code Analysis Tools for Windows

WAP automatic detects and corrects input validation vulnerabilities in web applications written in PHP Language (version 4.0 or higher) and with a low rate of false positives. WAP detects the following vulnerabilities: - SQL injection using MySQL, PostgreSQL and DB2 DBMS - Reflected cross-site scripting (XSS) - Stored XSS - Remote file inclusion - Local file inclusion - Directory traversal - Source code disclosure - OS command injection - PHP code injection WAP is a static analysis tool that performs taint analysis to detect vulnerabilities, tracking malicious users inputs and checking if they reach calls of sensitive functions. It has a low rate of false positives because has implemented a data mining module to predict false positives when detects vulnerabilities. The output of the tool is: - shows the vulnerabilities found and how they are corrected - new files with the corrections

This StarUML module for C++ provides practical support for legacy systems. It uses the StarUML as a KDM (Knowledge Discovery MetaModel) framework for existing systems. The module provides an incremental reverse engineering for C++ code with a set of configurable options, such as using namespaces or folder as packages, create attributes for relations or handle properties as relations,...

BPUtils is a Sterling Integrator BP file manipulation program. It features : - XPath expressions control : BPUtils checks that the XPath expressions defined in the BP file are correct - Consistency control : Controls that the sequences and the on faults are named in a correct way - Auto layout formatting : Formats automatically your BP layouts ! - BP tree printing : BPUtils is able to print to the console standard output the BP tree - BP dependencies analysis : Get the list of service configurations used by the BP And, implements your own functionality by using the Java BPUtils library ! BP loading from : - single BP file - XML resource export file - Automatic BP check out from server

A query language for code browsing. You query your database-- why don't you query your code? Write queries to provide custom views of your Java or C#/CLR code base. Integrates with popular IDEs or standalone.

CesTa (Code Enhancing Security Transformation and Analysis) is a tool for enhancing security by program transformations. Focused on Smart Cards (Java Card in particular), powered by Ant, ANTLR and StringTemplates.

ChkSem is a static Fortran 90 and C++ source code analyser. Fortran codes are analysed to find potential problems and dead code. This project allows ( for the moment ) to find useless includes and to find missing direct includes for helping programmers to clean C++ codes. This can potentially reduce building time from small programs to huge solutions. This tool is not finalized and new versions will follow, with a GUI with even more features. The project is written in Java to ensure cross-platform compatibility.

A static checker that model checks the implementation of equality for an Eclipse Java Project.

ExplorViz is a web-based software visualization for large software landscapes. It features two different perspectives: the landscape-level perspective and the application-level perspective. The former visualizes the systems, nodes, and application existing in the software landscape. The latter one utilizes the city metaphor to visualize the entities and communication happening in one application. For installation instructions and downloads see http://www.explorviz.net

JLineCounter is a tiny tool written in java for counting lines in a text file. text files may be source files like c,java,csharp etc.

Java library to parse GNU Makefiles. The source code is available from SVN. The latest revision should be in trunk, the latest "stable" release should be in branch.

Java reverse-engineering plug-in for Eclipse Modelling project. Depends on JDK and UML2 eclipse projects. Supports JKD5, including enums and generics.

JavacTo is a prototype tool designed to evaluate the need and value of translating java code into another programming language. An ideal language for translation is a language that supports the concept of packages, classes, interfaces, and enums as well as built-in memory garbage collection. Languages such as C# and D, are well suited as a translation “To” language. Eclipse project provided to get started. Three visitor classes provided to learn how to use JavacTo and write visitor classes. Vistor javadocs available at: http://docs.oracle.com/javase/8/docs/jdk/api/javac/tree/index.html

This project has moved to GitHub ! The version here at SourceForge will remain for historic purpose. Koopa is a parser generator, made for COBOL. It can handle source files in isolation (no preprocessing required) and doesn't mind the presence of CICS/SQL fragments. The grammar is easily extensible in a way which minimizes the impact on the overall code.

PatternDetect is an Eclipse plugin that extracts the design patterns used in an Eclipse Java project. PatternDetect can be extended with new design patterns.

Provides tools, supporting quality management or quality assurance for software: Assessment execution (ISO 15504 (SPiCE), AutomotiveSPiCE, CMMi), diff tool calculating sizes (SLoC) of diffs, identification of conditional compilation, and more.

gcRadar is not a static code anayser but it is a library using which is ment to beused in your source code and it will monitor and report the lifetime events of yuor objects. gcRadar can provide this information by using callbacks, log4j & polling. gcRadar can monitor entities ranging from individula objects to full object trees comprising of is-a & has-a relationships. By using gcRadar you can monitor the lifetime of the objects that are created by your application in runtime, gcRadar enables the application to be aware of the memory constaraints that arise at runtime. The workings of the mythical Java Garbage Collector have for long eluded the common developer. Now by gcRadar enable you to record the life and death of objects at runtime.

jUML is a UML diagram application capable of reverse engineering Java source code to create relationship diagrams, source code generation based on a user created UML diagram, and saving/restoring of jUML projects.

Recognizes typical patterns in Java code which could be replaced with functions provided by open source libraries http://www.jnorm.org

GCode sender for ramps and marlin firmware for CNC Milling Machine 3D preview RS232 and RS232 over TCP drivers Full GComands control, disable, replace, pause. Full machine control Remap XYZ coordinates GComands description After install select Help->Check for updates..