Cost / License
- Free
- Open Source (GPL-3.0)
Platforms
- Online
- Visual Studio Code
- Vim
- Sublime Text
- GNU Emacs
- Atom

Shellcheck vs Splint Comments

- Shellcheck is Free and Open Source
The best free alternative to Splint is Shellcheck, which is also Open Source. If that doesn't suit you, our users have ranked eight alternatives to Splint and seven of them is free so hopefully you can find a suitable replacement. Other interesting free alternatives to Splint are Cppcheck, Coverity Scan, Flawfinder and EDoC++.


Cppcheck is an static analysis tool for C/C++ code. Unlike C/C++ compilers and many other analysis tools it does not detect syntax errors in the code. Cppcheck primarily detects the types of bugs that the compilers normally do not detect.

Coverity Scan Static Analysis allows to find and fix defects in your Java, C/C++ or C# open source project for free.
Flawfinder examines C/C++ source code and reports possible security weaknesses ("flaws'') sorted by risk level. It's very useful for quickly finding and removing at least some potential security problems before a program is widely released to the public.
Is actively maintained and really fast. Works out of the box without configuration.

Facebook Infer is a static analysis tool - if you give Infer some Objective-C, Java, or C code, it produces a list of potential bugs.
VCG is an automated code security review tool that handles C/C++, Java, C#, VB and PL/SQL. It has a few features that should hopefully make it useful to anyone conducting code security reviews, particularly where time is at a premium:

Shellcheck is for shell scripts, and cannot be used for C code, and splint is the opposite.