What tools have you used for source code analysis?

Static analyzers are often used for source code analysis, helping to identify errors, vulnerabilities, and style inconsistencies without executing the code. Popular tools include:

• SonarQube — a platform for continuous code analysis supporting multiple languages.
• ESLint — for analyzing JavaScript/TypeScript.
• Pylint or Flake8 — for Python.
• Checkstyle — for Java.
• Cppcheck — for C/C++.

Security analysis tools are also used, such as Bandit for Python or Brakeman for Ruby on Rails.

Example of using ESLint:

eslint src/**/*.js

This allows automatic detection and fixing of errors, improving code quality.