Ross ROSS = Recommend OSS · open-source software intelligence for agents

facebook/infer

A static analyzer for Java, C, C++, and Objective-C observed · 2026-08-28

github.com/facebook/infer · homepage · OCaml · MIT (permissive) observed · 2026-08-28

Health v2 · maintenance only

82/100

  • Activity 99
  • Release rhythm 51
  • Longevity 100
How is this computed?

round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.

  • gap_med: n/a
  • age_days: 4237
  • days_rel: 113
  • days_push: 8
  • n_releases_24m: 1

Full methodology

Adoption not part of the score

15690 stars · 2099 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

Infer is a static analysis tool, written in OCaml, that detects bugs in Java, C, C++, Objective-C, and Erlang code before it ships. It intercepts critical issues such as null pointer dereferences, resource and memory leaks, data races, and concurrency problems by analyzing code as part of a build or CI pipeline.

Use cases

  • find null pointer exceptions in Android and Java code
  • detect memory leaks in C and C++ projects
  • catch resource leaks before shipping an iOS app
  • find data races and missing lock guards in Java code
  • run static analysis in a CI pipeline on every code change
  • analyze Objective-C code for null dereferences and unavailable APIs
  • write custom abstract-interpretation checkers for multiple languages

When to choose

  • you develop Java, Android, C, C++, or Objective-C code and want to catch bugs before release
  • you want a static analyzer that integrates with existing build commands like javac, gradle, xcodebuild, or clang
  • you need interprocedural analysis that finds deep issues across multiple files
  • you want a battle-tested tool deployed at scale in CI (used by Meta for Facebook, Instagram, WhatsApp)

When to avoid

  • your codebase is in languages Infer does not support, such as Python, Go, or Rust
  • you need dynamic testing or runtime verification rather than static analysis
  • you require a GUI-based analysis tool rather than a command-line workflow
  • you cannot tolerate GPL-licensed components needed for Java support

Facets

cli-tool · maturity active

security developer-tools ci-cd developer-tools testing programming-languages cli static-analysis static-code-analysis code-quality java cpp objective-c erlang abstract-interpretation bug-detection ocaml linux macos docker

8 sources

Member repositories

RepositoryRoleHealth v2
facebook/infermain82

For agents

markdown · JSON · MCP: product_card(name="facebook/infer")

Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem