Static Analyzer for Solidity base on Slither.

KunLun-M是一个完全开源的静态白盒扫描工具，支持PHP、JavaScript的语义扫描，基础安全、组件安全扫描，Chrome Ext\Solidity的基础扫描。

Pretty good call graphs for dynamic languages

Corax for Java: A general static analysis framework for java code checking.

Auto-generated CodeQL rules for matching CVE vulnerabilities and variants.