jar-analyzer/jar-analyzer
Jar Analyzer - 一个 JAR 包 GUI 分析工具，内置 AI 助手协助分析，支持 JAR DIFF 分析，方法调用关系搜索，方法调用链 DFS 算法分析，模拟 JVM 的污点分析验证 DFS 结果，字符串搜索，Java Web 组件入口分析，CFG 程序分析，JVM 栈帧分析，自定义表达式搜索等 observed · 2026-08-28
Health v2 · maintenance only
94/100
- Activity 99
- Release rhythm 99
- Longevity 75
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: 20.0
- age_days: 1061
- days_rel: 7
- days_push: 7
- n_releases_24m: 33
Adoption not part of the score
2158 stars · 202 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
A free, open-source GUI tool for analyzing Java JAR files, offering method call relationship search, DFS call chain analysis, taint analysis, CFG and JVM stack frame inspection, string search, and JAR diff. It also includes a built-in AI assistant and MCP service for hybrid manual/AI-assisted analysis.
Use cases
- analyze java jar file call chains
- find method call relationships in a jar
- static analysis of java bytecode for vulnerabilities
- diff two jar versions
- search strings inside java jars
- analyze java web component entry points
- build call graph and cfg for java methods
- taint analysis to find gadget chains
When to choose
- you need precise, reproducible static analysis of large Java codebases that exceeds LLM context windows
- you must keep proprietary code local and offline
- you want interactive GUI exploration of call chains, CFGs, and stack frames
- you are doing Java security auditing or vulnerability research
When to avoid
- you need dynamic runtime debugging rather than static analysis
- your target is not Java/JVM bytecode
- you prefer a headless CLI-only pipeline without a GUI
Facets
application · maturity active
reverse-engineering security gui search-engine mcp security reverse-engineering developer-tools cross-platform jvm cli jar-analysis static-analysis bytecode-analysis call-graph taint-analysis vulnerability-research java-security decompiler cfg ai-assistant java desktop
2 sources
- readme: https://github.com/jar-analyzer/jar-analyzer · fetched 2026-08-28 · 3d3f5514f665
- homepage: https://jar-analyzer.github.io · fetched 2026-08-29 · 96d6df5718ea
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| jar-analyzer/jar-analyzer | main | 94 |
For agents
markdown · JSON · MCP: product_card(name="jar-analyzer/jar-analyzer")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem