Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

A library to extract Code Property Graphs from C/C++, Java, Go, Python, Ruby and every other language through LLVM-IR.

MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code using Code Property Graphs.

Code Property Graph (CPG) frontend for binary applications and libraries.

LLVM meets Code Property Graphs

Codyze is a static analyzer for Java, C, C++ based on code property graphs

Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various graph databases.

The Cloud Property Graph is based on a Code Property Graph and tries to connect static code analysis and Cloud runtime assessment.

A static analysis tool for Java programs, based on the theory of code property graphs.

A Python implementation of a language-agnostic Code Property Graph

Neo4J visualisation tool for the Code Property Graph

Examples of how to use Plume

A Demo Program of Security Patch Identification with Graph Neural Networks.

Static analysis tool that extracts architecture data from Kubernetes repos, builds multi-language code property graphs (Go, Python, TS, Rust), and runs security/architecture queries with taint analysis

Ultra-fast open-source code security scanner. Finds vulnerabilities across 8 languages (Rust, Go, Python, JS, TS, Java, C, C++) using SAST + taint analysis + LLM verification — fewer false positives, faster audits. Outputs Sigstore-signed SARIF, SBOM, and OpenVEX bundles for supply-chain compliance.

Code property graph for JS/ESM. Single-pass AST builds a CPG with call resolution, then runs centrality, clustering, cycle detection, blast radius, process tracing, and schema auditing — with Cypher queries built in.

Rust-first Joern fork exploring faster code-property-graph frontends and security-analysis components.

Master's Thesis - Evaluating Reliability of Static Analysis Results Using Machine Learning

Multi-language call-graph analysis toolkit with Clang and tree-sitter backends, an interactive dashboard, and incremental caching.

Source code for the Plume documentation.