Repositories list

• tamiflex

  Public
  TamiFlex facilitates static analysis of programs that use reflection and custom class loaders

  Java

  •1717 forks•4545 stars•1010 issues•22 pull requests•Updated Oct 1, 2026Oct 1, 2026

• phasar

  Public
  A LLVM-based static analysis framework.

  ccppllvm+ 3

  ccppllvmstatic-analysisprogram-analysisdata-flow-analysis

  C++

  •

  Other

  •160160 forks•1.1k1.1k stars•2929 issues•77 pull requests•Updated Sep 30, 2026Sep 30, 2026

• Boomerang

  Public
  Demand-Driven Pointer Analysis

  CSS

  •

  Eclipse Public License 2.0

  •88 forks•1414 stars•1111 issues•22 pull requests•Updated Sep 29, 2026Sep 29, 2026

• FlowDroid

  Public
  FlowDroid Static Data Flow Tracker

  static-analysisflowdroiddata-flow-tracker

  static-analysisflowdroiddata-flow-tracker

  Java

  •

  GNU Lesser General Public License v2.1

  •322322 forks•1.3k1.3k stars•242242 issues•33 pull requests•Updated Sep 28, 2026Sep 28, 2026

• srm-dataset

  Public
  Cross-language dataset of security-relevant methods (SRMs) for taint analysis and machine learning approaches.

  Java

  •00 forks•00 stars•00 issues•00 pull requests•Updated Sep 10, 2026Sep 10, 2026

• PathExpression

  Public
  An implementation of Tarjan's PathExpression algorithm

  Java

  •

  Eclipse Public License 2.0

  •22 forks•66 stars•00 issues•22 pull requests•Updated Sep 7, 2026Sep 7, 2026

• actions

  Public
  Secure Software Engineering groups GitHub Actions - centralized & reusable

  00 forks•00 stars•33 issues•00 pull requests•Updated Aug 7, 2026Aug 7, 2026

• achilles-benchmark-depscanners

  Public
  Achilles - Benchmark for assessing OSS-Vulnerability Scanners 59

  Java

  •

  GNU Lesser General Public License v3.0

  •77 forks•1111 stars•00 issues•55 pull requests•Updated Jul 31, 2026Jul 31, 2026

• CogniCryptSQPlugin

  Public
  CogniCrypt SonarQube Plugin

  Java

  •

  Other

  •00 forks•00 stars•00 issues•11 pull request•Updated Jun 10, 2026Jun 10, 2026

• DroidBench

  Public
  A micro-benchmark suite to assess the stability of taint-analysis tools for Android

  Java

  •116116 forks•303303 stars•33 issues•33 pull requests•Updated Jun 3, 2026Jun 3, 2026

• TypeEvalPy

  Public
  A Micro-benchmarking Framework for Python Type Inference Tools

  pythonbenchmarkstaticanalysis+ 1

  pythonbenchmarkstaticanalysistypeinference

  Python

  •66 forks•3737 stars•22 issues•11 pull request•Updated Apr 17, 2026Apr 17, 2026

• FlowDroid_QCG

  Public
  FlowDroid Static Data Flow Tracker

  Java

  •

  GNU Lesser General Public License v2.1

  •00 forks•00 stars•00 issues•00 pull requests•Updated Apr 15, 2026Apr 15, 2026

• SWARM-CG

  Public
  Swiss Army Knife of Call Graph Micro-Benchmark

  Python

  •11 fork•1111 stars•33 issues•00 pull requests•Updated Mar 30, 2026Mar 30, 2026

• COVA

  Public
  COVA - A static analysis tool to compute path conditions

  Python

  •

  GNU Lesser General Public License v2.1

  •77 forks•4141 stars•11 issue•33 pull requests•Updated Mar 2, 2026Mar 2, 2026

• upcy

  Public
  UpCy automatically finds compatible updates for Maven dependencies.

  Java

  •

  Apache License 2.0

  •11 fork•1212 stars•11 issue•00 pull requests•Updated Feb 8, 2026Feb 8, 2026

• swan

  Public
  Security methods for WeAkNess detection

  Java

  •

  BSD 3-Clause "New" or "Revised" License

  •77 forks•2020 stars•1919 issues•44 pull requests•Updated Jan 26, 2026Jan 26, 2026

• fuzzing_taxonomy

  Public
  JavaScript

  •00 forks•00 stars•00 issues•00 pull requests•Updated Dec 2, 2025Dec 2, 2025

• SeedUI

  Public
  SeedUI: Understanding Initial Seeds in Fuzzing

  C

  •

  MIT License

  •00 forks•11 star•00 issues•00 pull requests•Updated Nov 11, 2025Nov 11, 2025

• spring-petclinic-kotlin

  Public
  Vulnerable version of the Spring PetClinic application in Kotlin

  Kotlin

  •

  Apache License 2.0

  •55 forks•11 star•00 issues•00 pull requests•Updated Oct 8, 2025Oct 8, 2025

• Deblometer

  Public
  A Java Debloating Benchmark

  javabenchmarkingbenchmark+ 3

  javabenchmarkingbenchmarkstatic-analysisdebloatingdebloater

  Java

  •

  GNU General Public License v3.0

  •00 forks•00 stars•00 issues•00 pull requests•Updated Aug 29, 2025Aug 29, 2025

• secucheck-core

  Public
  Taint Analysis on top of Soot.

  Java

  •

  MIT License

  •33 forks•1010 stars•11 issue•11 pull request•Updated Apr 22, 2025Apr 22, 2025

• SparseBoomerang

  Public
  Sparse Demand-Driven Pointer Analysis

  Java

  •

  Eclipse Public License 2.0

  •88 forks•22 stars•00 issues•00 pull requests•Updated Mar 10, 2025Mar 10, 2025

• QCG

  Public
  Qilin: A New Framework for Supporting Fine-Grained Context-Sensitivity in Java Pointer Analysis

  Java

  •

  GNU Lesser General Public License v2.1

  •3434 forks•00 stars•00 issues•00 pull requests•Updated Feb 25, 2025Feb 25, 2025

• secucheck-catalog

  Public
  33 forks•00 stars•00 issues•00 pull requests•Updated Jan 30, 2025Jan 30, 2025

• secucheck

  Public
  Soot-based taint analysis with internal Java fluent interface for security specifications in fluentTQL implemented with MagpieBridge to support multiple IDEs.

  Java

  •

  MIT License

  •66 forks•2020 stars•66 issues•00 pull requests•Updated Jan 30, 2025Jan 30, 2025

• HeaderGen

  Public
  HeaderGen annotates Jupyter notebooks using static analysis. Improves PyCG's call graph analysis by supporting external libraries and flow-sensitivity.

  pythonstatic-analysisjupyter-notebook+ 1

  pythonstatic-analysisjupyter-notebookcall-graph-analysis

  Jupyter Notebook

  •11 fork•1515 stars•11 issue•11 pull request•Updated Jan 30, 2025Jan 30, 2025

• paper-idesolverxx

  Public
  Supplementary website for the paper "Scaling Interprocedural Static Data-Flow Analysis to Large C/C++ Applications"

  HTML

  •00 forks•22 stars•00 issues•00 pull requests•Updated Jul 30, 2024Jul 30, 2024

• neck

  Public
  C++

  •

  MIT License

  •22 forks•44 stars•00 issues•00 pull requests•Updated Jul 15, 2024Jul 15, 2024

• sootdiff

  Public
  SootDiff - Bytecode Comparison Across Different Java Compilers

  Java

  •

  MIT License

  •44 forks•1919 stars•11 issue•11 pull request•Updated May 24, 2024May 24, 2024

• avighna

  Public
  Java

  •00 forks•00 stars•00 issues•00 pull requests•Updated Mar 15, 2024Mar 15, 2024