code-property-graph

Open-source code analysis platform for C/C++/Java/Binary/Javascript/Python/Kotlin based on code property graphs. Discord https://discord.gg/vv4MH284Hc

A library to extract Code Property Graphs from C/C++, Java, Go, Python, Ruby and every other language through LLVM-IR.

MATE is a suite of tools for interactive program analysis with a focus on hunting for bugs in C and C++ code using Code Property Graphs.

Code Property Graph (CPG) frontend for binary applications and libraries.

LLVM meets Code Property Graphs

Codyze is a static analyzer for Java, C, C++ based on code property graphs

Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various graph databases.

Succinct Compositional Program Graph (SCPG) static analysis engine & 14-diagram UML generator in Rust.

The Cloud Property Graph is based on a Code Property Graph and tries to connect static code analysis and Cloud runtime assessment.

A Python implementation of a language-agnostic Code Property Graph

A static analysis tool for Java programs, based on the theory of code property graphs.

Neo4J visualisation tool for the Code Property Graph

Examples of how to use Plume

Static analysis tool that extracts architecture data from Kubernetes repos, builds multi-language code property graphs (Go, Python, TS, Rust), and runs security/architecture queries with taint analysis

chennai (chen N ai) is a hybrid AI agent and a terminal user interface for static analysis, data-flow tracing, and AI-assisted code and security analysis.

A Demo Program of Security Patch Identification with Graph Neural Networks.

KarsaSec is a high-performance, pluggable Static Application Security Testing (SAST) platform for multi-language codebases. Features an advanced AST-based CPG (Code Property Graph) query engine, local hybrid RAG security remediation, and autonomous AI-agent workflows with zero-trust guardrails.

Compiler-precise code property graph for C, Python, and TypeScript, navigable over MCP — data- and taint-flow with source→sink witnesses, points-to, and guard/sink structure for security reasoning over source.

Lab 04 Big Data project: incremental Code Property Graph streaming pipeline with Kafka, Neo4j, MongoDB, Spark Structured Streaming, and Jupyter Book evidence.

Self-hosted, open-source SAST that makes findings durable: refactor-invariant finding identity, reproducible results, and signed provenance. One-command Docker deploy.