{"categories":[{"label":"Quality Assurance","url":"https://skillfed.io/packages/category/software-development-quality-assurance/3"},{"label":"Compilers","url":"https://skillfed.io/packages/category/software-development-compilers"}],"enrichment":{"capability":"Runs the Clang static analyzer on C/C++ projects using a compilation database and generates HTML or plist reports of potential bugs without modifying the build.","skillfed_tags":["static-analysis","c-cpp","clang"],"use_cases":["Integrate static analysis into CI/CD pipelines with --status-bugs to fail builds when potential bugs are detected.","Analyze third-party or legacy C/C++ codebases without modifying their build configuration.","Generate HTML reports of code defects for code review and quality tracking across releases.","Exclude specific directories (e.g., vendor code) from analysis using --exclude flags.","Export machine-readable plist output for automated tooling and defect tracking systems."],"what_it_does":"scan-build is a Python-based wrapper around the Clang static analyzer that automates analysis of C/C++ projects. It reads a compilation database (a JSON file describing how each source file should be compiled), runs the Clang analyzer against each entry, and produces reports of potential bugs in HTML or machine-readable plist format. The tool works with any build system that can generate a compilation database\u2014CMake does this natively with a flag, and other build systems can use the Bear tool to capture compiler invocations.\n\nThe package requires clang to be installed separately and Python 3.10 or later. It has no Python dependencies, making installation straightforward. Unlike earlier versions, it no longer intercepts build commands; it purely analyzes existing compilation databases. This design simplifies the tool and shifts database generation to dedicated tools like Bear, which now support all major platforms including Windows.","worth_installing":"Yes. This is a mature, actively maintained tool (release 4 days old, 396 GitHub stars) with zero known vulnerabilities, no Python dependencies, and permissive MIT licensing. Install it if you need to run Clang static analysis on C/C++ projects with a compilation database. The only real prerequisite is having clang and a compilation database available\u2014if your build system doesn't generate one natively, use Bear first."},"id":"scan-build","links":{"html":"https://skillfed.io/packages/scan-build","md":"https://skillfed.io/packages/scan-build.md","pypi":"https://pypi.org/project/scan-build/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2026-08-10","license_spdx":"MIT","license_treatment":"permissive","name":"scan-build","python_support":"supports_current","summary":"Run the Clang static analyzer on projects with a compilation database."},"popularity":{"monthly_downloads":151137,"position":10943,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"3.1.0"}