Software Quality Tools

Acceptance Testing

• Robot Framework | Keyword-based acceptance testing framework

Accessibility

• Pa11y | Automated accessibility web page checker

Continuous Stuff

• Dependency CI | Provides feedback on project dependencies (licenses, security, outdated etc.)

Debuggers

• GDB Dashboard | Modular visual interface for GDB

Fuzzers

• American Fuzzy Lop | White-box, instrumented fuzzer able to efficiently guide the fuzzing to explore new internal states of the system under test
• Radamsa | my notes | Extremely simple to setup but powerful, black-box mutation fuzzer

Instrumentation Tools

• Leak Sanitizer | LLVM-based run-time memory leak detector
• UBSan | LLVM-based run-time undefined behavior detector for C/C++
• Memory Sanitizer | LLVM-based run-time unitialized memory read detector
• Thread Sanitizer | LLVM-based run-time race condition detector
• Address Sanitizer | LLVM-based run-time memory error detector

Mocks

• cwrap | Allows mocking users, privileges, DNS and network for Linux

Performance

• Pyflame | Profiler that generates flame graphs for Python programs

Security

• clair | Vulnerability static analyzer for containers

Static Analysis

• Brakeman | GitHub | Vulnerability scanner for Ruby on Rails applications
• Cppcheck | Light-weight static analyzer for C and C++
• Flow | Static type checker for JavaScript
• Frama-C | A heavy-weight, state-of-the-art suite of static analyzers for C
• Infer | Very powerful static analysis tool for Java, C/C++ and Objective C
• OCLint | GitHub | Static code checker for C, C++ and Objective C
• reek | Code smell detector for Ruby
• ShellCheck | Static analyzer for Shell language

Test Generators

• Randoop | my notes | Automated unit test generator for Java

Test Drivers

• clitest | my notes | Doctest-like command line tester