bethington / ghidra-mcp

MCP server that exposes Ghidra's reverse engineering capabilities as 200+ tools for AI assistants, via a GUI plugin and headless server.

GrapheneOS / Auditor

Hardware-based attestation and intrusion detection app for Android. It provides both local verification with another Android device via QR codes and optional scheduled server-based verification with support for alert emails. It uses hardware-backed keys and attestation support as the foundation and chains trust to the app for software checks.

yixing233 / HyperDuo

HyperDuo · 仿 iPhone Duo 三合一状态栏图标

SonarSource / sonarqube

Continuous Inspection

Col-E / Recaf

The modern Java bytecode editor

apache / hertzbeat

An AI-powered next-generation open source real-time observability system.

tianshiyeben / wgcloud

Linux运维监控工具，支持系统硬件信息，内存，CPU，温度，磁盘空间及IO，硬盘smart，GPU，防火墙，网络流量速率等监控，服务接口监测，大屏展示，拓扑图，端口监控，进程监控，docker监控，日志监控，文件防篡改，数据库监控，指令批量下发执行，web ssh，Linux面板(探针)，告警，SNMP监测，K8S，Redis，Nginx，Kafka，资产管理，计划任务，密码管理，工作笔记

uber / NullAway

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

sanluan / PublicCMS

More than 2.7 million lines of code modification continuously iterated for 10 years to modernize java cms, easily supporting tens of millions of data, tens of millions of PV; Support static, server side includes; Currently has 0.0005% of the world's users (w3techs provided data), language support in Chinese, Japanese, English

SonarSource / sonar-java

:coffee: SonarSource Static Analyzer for Java Code Quality and Security

checkstyle / checkstyle

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

google / error-prone

Catch common Java mistakes as compile-time errors

haifengl / smile

Statistical Machine Intelligence & Learning Engine

JSQLParser / JSqlParser

JSqlParser parses an SQL statement and translate it into a hierarchy of Java classes. The generated hierarchy can be navigated using the Visitor Pattern

pmd / pmd

An extensible multilanguage static code analyzer.

spotbugs / spotbugs

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

soot-oss / soot

Soot - A Java optimization framework

find-sec-bugs / find-sec-bugs

The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

jplag / JPlag

State-of-the-Art Source Code Plagiarism & Collusion Detection. Check for plagiarism in a set of programs.

INRIA / spoon

Spoon is a metaprogramming library to analyze and transform Java source code. :spoon: is made with :heart:, :beers: and :sparkles:. It parses source files to build a well-designed AST with powerful analysis and transformation API.

hcoles / pitest

State of the art mutation testing system for the JVM

88250 / solo

🎸 B3log 分布式社区的 Java 博客端节点系统，欢迎加入下一代社区网络。B3log distributed community blog-end node based on Java, welcome to join the next generation community network.

OpenEMS / openems

OpenEMS - Open Source Energy Management System

apache / rocketmq-dashboard

The state-of-the-art Dashboard of Apache RoccketMQ provides excellent monitoring capability. Various graphs and statistics of events, performance and system information of clients and application is evidently made available to the user.

secure-software-engineering / FlowDroid

FlowDroid Static Data Flow Tracker

jspecify / jspecify

An artifact of fully-specified annotations to power static-analysis checks, beginning with nullness analysis.

steve-community / steve

SteVe - OCPP server implementation in Java. Your trusted open-source EV charging station management system since 2013. Used by CPOs, manufacturers and developers worldwide. Managed cloud →

plan-player-analytics / Plan

Player Analytics plugin for Minecraft Server platforms - View player activity of your server with ease. :calendar:

vaadin / hilla

Build better business applications, faster. No more juggling REST endpoints or deciphering GraphQL queries. Hilla seamlessly connects Spring Boot and React to accelerate application development.

yegor256 / takes

True Object-Oriented Java Web Framework without NULLs, Static Methods, Annotations, and Mutable Objects

wala / WALA

T.J. Watson Libraries for Analysis, with front ends for Java, Android, and JavaScript, and many common static program analyses.

OWASP-Benchmark / BenchmarkJava

OWASP Benchmark is a test suite designed to verify the speed and accuracy of software vulnerability detection tools. A fully runnable web app written in Java, it supports analysis by Static (SAST), Dynamic (DAST), and Runtime (IAST) tools that support Java. The idea is that since it is fully runnable and all the vulnerabilities are actually exploitable, it’s a fair test for any kind of vulnerability detection tool. For more details on this project, please see the OWASP Benchmark Project home page.

soot-oss / SootUp

A new version of Soot with a completely overhauled architecture

skadistats / clarity

Comically fast Dota 2, CSGO, CS2 and Deadlock replay parser written in Java.

SonarSource / sonarqube-mcp-server

Official SonarQube MCP Server for code quality and security in AI agents

apache / commons-math

Apache Commons Math

nysenate / OpenLegislation

OpenLegislation is a web service that delivers legislative information from the New York State Senate and Assembly to the public in near-real time. It is used internally to serve up legislative data for nysenate.gov and the Bluebird-CRM.

refactorfirst / RefactorFirst

Identifies and prioritizes Class and Package Cycles and Anti-pattens in Java & Kotlin codebases you should refactor first.

sladkoff / minecraft-prometheus-exporter

A Bukkit plugin which exports minecraft server stats to Prometheus

cdmiltd / hivemind-simulator

DJI Dock 模拟器/调试器：模拟 DJI Dock 机场及配套飞行器的上云注册、设备上线、OSD/State 上报、航线任务、直播、媒体上传、HMS 告警等完整云端交互流程，对接巡飞平台（DJI Cloud API 后端）。比真机更快捷地验证平台代码正确性，提供 Spring Boot 后端 + Vue 前端 + Tauri 桌面端一体化调试工具。

SANWU5 / c17-statusbar

适用于 OnePlus/Oplus SystemUI 的 libxposed 状态栏美化模块。

Wizardtastic / Ecstatic

A hilariously optimized level of detail mod for low end (and high end) machines that retains vanilla performance

HebiRobotics / jfx-static-feature

—

rohingosling / eca-rule-engine-2

Stateless ECA (Event Condition Action) Rule Engine.

swaldman / c3p0

a mature, highly concurrent JDBC Connection pooling library, with support for caching and reuse of PreparedStatements.