Building the product · Independent · 26 Oct 2026

facebook/infer

A static analyzer for Java, C, C++, and Objective-C

← Building the product
Infer: static bug finder. Scans code for hidden errors before execution.
Verified26 Oct 2026

Radar check

What we found when we opened it. Every bar is one fact, with its date.

Alive100

Last code pushed 23 Oct 2026, 2 days before this check.

Releases70

Latest release v1.3.0 on 12 May 2026.

Maturity100

Public since January 2015, a little over 11 years.

Adoption84

15,729 stars and 2,100 forks.

Activity65

94 commits and 20 new issues in the last 90 days.

Community100

233 contributors. 88 pull requests merged in 90 days.

Security80

A security policy says how to report a problem. No published security advisories.

Licence MIT: permissive: use it for anything, keep the noticeSetup effort 4 of 5Payoff 4 of 5
How the bars are scored
  • Alive. Days since the last code push: a week or less 100, a month 90, three months 70, six months 50, a year 30, eighteen months 15, older 0.
  • Releases. Age of the latest GitHub release, on a similar scale; no bar when the project publishes no releases.
  • Maturity. Age of the project: eight years 100, five 90, three 70, two 55, one 40, six months 25, younger 10.
  • Adoption. Stars on a log scale: 100,000 stars is 100, 10,000 is 80, 1,000 is 60, 100 is 40.
  • Activity. Commits in the last 90 days: 300 or more 100, 100 85, 30 65, 10 45, any 25.
  • Community. People who have contributed: 100 or more 100, 30 80, 10 60, 5 40, 2 25, one 10.
  • Security. A published security policy 80, none 40; published advisories are listed, not scored.

Checked by Repo Radar on 26 Oct 2026 from the repository on GitHub.

In simple English

This tool checks your code before you run it. It looks for hidden bugs, crashes, and memory leaks. It scans programs written in C, C++, Java, and Objective-C. Big companies use it to stop bad updates from reaching users. You need a computer that can run command-line tools to set it up.

What it is

Infer (a static analyzer, which is a program that reads your source code to find errors without executing it) scans codebases for deep programming flaws. It is written in OCaml (a fast programming language known for safety) and developed by Meta.

What it is good for

Solo developers building native apps or system tools who want to catch null pointer errors and memory leaks early.

Stars16k
LicenceMIT
Latestv1.3.0 (2026-05-12)checked 26 Oct 2026
Last code change2026-10-23
Written inOCaml
Setup effort
4 / 5
Payoff
4 / 5
Good
  • Catches hard-to-find memory bugs early.
  • Works on four major programming languages.
  • Free to use under an MIT licence.
Watch for
  • Complex to set up for non-programmers.
  • Requires a powerful computer for large codebases.
  • Java support may pull in GPL dependencies.
Replaces

manual code reviews

Works well with

GitHub Actions

Similar repositories
  • rust-lang/rust121k stars

    The compiler checks memory safety at build time for its own language.

  • golang/go140k stars

    Includes built-in checkers for formatting and common programming mistakes.

  • github/codeql10k stars

    Queries your codebase to find security vulnerabilities and bugs.

Also reviewed on Repo Radar
  • evanw/esbuild40k stars

    Joins many JavaScript, TypeScript and CSS files into one, in well under a second.

  • Textualize/textual38k stars

    Lets a Python program draw a real interface inside a terminal, and serve the same thing to a browser.

  • python-attrs/cattrs1.1k stars

    Turns loose data into declared Python objects, and declared objects back into loose data.

Install
brew install infer

Independent: reviewed for Repo Radar outside the daily editions. Every independent repository

On Stack Radar: Build & Ship › Testing & Quality › Static Analysis & Type.

Get the next edition in your inbox

A dozen repositories, opened and checked. The licence read, the last release dated, and the ones that did not make it named with the reason. It is the half most lists leave out.

No tracking pixels. One click to leave. The archive stays free either way.

We use your address to send the edition and nothing else. Confirm by email, leave in one click. How we handle it.