Microsoft Application Inspector

Application Inspector is a source code analyzer built for surfacing features of interest and other characteristics to answer the question "What's in it" using static analysis with a json based rules engine. Ideal for scanning components before use or detecting feature level changes.

Application Inspector is different from traditional static analysis tools in that it doesn't attempt to identify "good" or "bad" patterns; it simply reports what it finds against a set of over 400 rule patterns for feature detection including features that impact security such as the use of cryptography and more. This can be extremely helpful in reducing the time needed to determine what Open Source or other components do by examining the source directly rather than trusting to limited documentation or recommendations.