PhpMetrics provides metrics about PHP project and classes, with beautiful and readable HTML report.
Cost / License
- Free
- Open Source (MIT)
Platforms
- Self-Hosted


Apps similar to Semgrep include SonarQube, which is open source with a free version. Other options are Codacy, Shellcheck, Cppcheck and Coverity Scan. Code Reviews like Semgrep are a crowded field, with more than 25 alternatives for the web, Windows, Linux, Mac and self-hosting.
PhpMetrics provides metrics about PHP project and classes, with beautiful and readable HTML report.


Find and fix bug risks, anti-patterns, performance issues, security flaws automatically during code reviews. In addition, DeepSource automatically fixes some of the most commonly occurring issues. It works for Python, Go, Ruby, and JavaScript.




Your app works, but is it secure and efficient? Security vulnerabilities, exposed credentials, architectural flaws, and technical debt can lurk unnoticed. Meet Reactable - a platform to assess your codebase readiness.




ProjectCodeMeter Is a professional software tool for project managers to measure and estimate the Time, Cost, Complexity, Quality Metrics and Maintainability of software projects as well as Development Team Productivity by analyzing their source code.




Open-source, self-hosted code quality platform: a SonarQube alternative without lines-of-code licensing. Qualor runs existing open-source analyzers, tracks their issues across commits, measures coverage, duplication and complexity, and applies a quality gate to new code.




Code analysis tool, including breakdown of developer contributions, and a clear breakdown of different types of problems with trends over time.
Teamscale analyzes the quality of your code. Analyze your code with a variety of static and dynamic analyses to identify specific maintainability constraints and avoid unexpected maintenance costs in the future.



VCG is an automated code security review tool that handles C/C++, Java, C#, VB and PL/SQL. It has a few features that should hopefully make it useful to anyone conducting code security reviews, particularly where time is at a premium:

Codegrip is an automated code review SaaS platform that helps developers to save time in code reviews and to tackle technical debt efficiently.




Zof CLI is an open-source command-line tool for inspecting software changes locally. It checks changed source lines for a documented set of static risks and reports findings with severity, file and line information.

Scans payment integration code for PCI requirements, explains findings and fixes, and monitors payment processor and standard updates.

