# SVF-tools/SVF

Static Value-Flow Analysis Framework for Source Code

Repository: https://github.com/SVF-tools/SVF
Canonical: https://ross.abutalabs.com/products/svf
Homepage: http://svf-tools.github.io/SVF/
Language: C++
License: NOASSERTION
License Family: other
Topics: static-analysis, static-value-flow, source-code-analysis, pointer-analysis, llvm, dependency-analysis, code-analysis, points-to-analysis, static-analyzer, abstract-interpretation, bug-detection, code-verification
Last push: 2026-08-24T11:31:31+00:00

## Health v2 (maintenance only)
Score: 86/100 (v2, computed 2026-09-03T02:39:23.370411+00:00)
- activity 99, release rhythm 60, longevity 100
- inputs: {"age_days": 4108, "days_push": 9, "days_rel": 106, "gap_med": 174.0, "n_releases_24m": 3}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1705, forks 495 (observed 2026-08-28T04:05:24.799542+00:00)

## What it is
SVF is a C++ static analysis framework built on LLVM that provides scalable and precise value-flow analysis and pointer analysis for source code. It offers reusable graphs, solvers, and analyses for detecting bugs such as memory leaks and incorrect file open/close errors.

## Use cases
- perform pointer and points-to analysis on C/C++ programs
- detect memory leaks and source-sink bugs statically
- build custom static analyzers on top of LLVM IR
- compute value-flow dependence and program slicing
- analyze call graphs and interprocedural control-flow graphs
- teach or research static program analysis techniques

## When to choose
- you need scalable, precise pointer or value-flow analysis for C/C++ code compiled to LLVM IR
- you are building a custom static analyzer or bug detector on LLVM
- you want an academically grounded framework with field-, flow-, and context-sensitive analyses

## When to avoid
- your code does not compile to LLVM IR (e.g., Java or Rust - use Qilin or Rupta instead)
- you need dynamic/runtime analysis rather than static analysis
- you want a turnkey commercial-grade security scanner with minimal setup

## Facets
- artifact type: library
- maturity: active
- function: parser, compiler, developer-tools, security
- domain: developer-tools, security, programming-languages, compilers
- platform: cpp
- tags: static-analysis, pointer-analysis, llvm, value-flow, bug-detection, abstract-interpretation, code-verification, linux, macos

## Member repositories
- SVF-tools/SVF (main) score 86

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:24.799542+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:37:31.072221+00:00, confidence not recorded.
  - readme: https://github.com/SVF-tools/SVF (fetched 2026-08-28T04:05:24.799542+00:00, sha 87ab2594c50f)
  - homepage: http://svf-tools.github.io/SVF/ (fetched 2026-08-29T11:11:38.392238+00:00, sha 7c2c5b28a065)
- Data as of 2026-08-30T08:39:29.467469+00:00.