Radar check
What we found when we opened it. Every bar is one fact, with its date.
Last code pushed 26 Oct 2026, the same day before this check.
Latest release 2.22.0 on 19 Sep 2026.
Public since March 2009, a little over 17 years.
6,787 stars and 1,605 forks.
171 commits and 0 new issues in the last 90 days.
548 contributors. 168 pull requests merged in 90 days.
No security policy file says how to report a problem. No published security advisories.
How the bars are scored
- Alive. Days since the last code push: a week or less 100, a month 90, three months 70, six months 50, a year 30, eighteen months 15, older 0.
- Releases. Age of the latest GitHub release, on a similar scale; no bar when the project publishes no releases.
- Maturity. Age of the project: eight years 100, five 90, three 70, two 55, one 40, six months 25, younger 10.
- Adoption. Stars on a log scale: 100,000 stars is 100, 10,000 is 80, 1,000 is 60, 100 is 40.
- Activity. Commits in the last 90 days: 300 or more 100, 100 85, 30 65, 10 45, any 25.
- Community. People who have contributed: 100 or more 100, 30 80, 10 60, 5 40, 2 25, one 10.
- Security. A published security policy 80, none 40; published advisories are listed, not scored.
Checked by Repo Radar on 26 Oct 2026 from the repository on GitHub.
In simple English
This tool reads C and C++ source files to find common programming mistakes. It looks for memory leaks, uninitialized variables, and logic errors before you run your software. It runs on your computer as a command-line utility or inside your code editor. It is free to use under an open-source licence. You need some technical knowledge to install and interpret its output.
What it is
Cppcheck is a static analysis tool for C and C++ codebases. It inspects source code syntax to spot bugs that standard compilers might miss.
What it is good for
Solo developers writing C or C++ who want to catch bugs and memory errors early in the coding process.
- Catches dangerous memory bugs and logic errors automatically.
- Runs quickly on local machines without needing external cloud services.
- Integrates directly into popular editors like VS Code.
- Requires familiarity with compiling C and C++ projects.
- Can produce false positive warnings that require manual review.
- Setup from source requires CMake and a C++ compiler.
manual code review and compiler-only warnings
VS Code
- include-what-you-use/include-what-you-use4.8k stars
Analyzes #include lines in C and C++ source files to find missing or unused headers.
- oclint/oclint3.9k stars
A static source code analysis tool to improve quality and reduce defects in C, C++, and Objective-C.
- evanw/esbuild40k stars
Joins many JavaScript, TypeScript and CSS files into one, in well under a second.
- Textualize/textual38k stars
Lets a Python program draw a real interface inside a terminal, and serve the same thing to a browser.
- python-attrs/cattrs1.1k stars
Turns loose data into declared Python objects, and declared objects back into loose data.
cmake -S . -B build cmake --build build