Alternatives

NullAway alternatives for AI agents.

Compare similar skills by workflow fit, trust score, quality, GitHub adoption, maintenance, and install readiness.

Current skill

NullAway

A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

100
Quality
96
Trust
4.1K
Stars
#1

Checkstyle

Similarity 140Trust 97Excellent 100

Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

8.9K starsJun 16, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add checkstyle/checkstyle
#2

Spotbugs

Similarity 138Trust 96Excellent 100

SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

3.9K starsJun 13, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add spotbugs/spotbugs
#3

Infer

Similarity 135Trust 95Excellent 100

A static analyzer for Java, C, C++, and Objective-C

16K starsJun 13, 2026 pushdevelopmentOCamlStatic Analysis
$ npx skills add facebook/infer
#4

Sonarqube

Similarity 132Trust 95Excellent 100

Continuous Inspection

11K starsJun 12, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add SonarSource/sonarqube
#5

Error Prone

Similarity 131Trust 94Excellent 100

Catch common Java mistakes as compile-time errors

7.2K starsJun 15, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add google/error-prone
#6

Pmd

Similarity 130Trust 90Excellent 100

An extensible multilanguage static code analyzer.

5.4K starsJun 12, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add pmd/pmd
#7

Soot

Similarity 129Trust 89Excellent 100

Soot - A Java optimization framework

3.1K starsMay 29, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add soot-oss/soot
#8

Phpstan

Similarity 126Trust 95Excellent 100

PHP Static Analysis Tool - discover bugs in your code without running it!

14K starsJun 15, 2026 pushdevelopmentPHPStatic Analysis
$ npx skills add phpstan/phpstan
#9

Gosec

Similarity 125Trust 94Excellent 100

Go security checker

8.9K starsJun 15, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add securego/gosec
#10

Revive

Similarity 125Trust 97Excellent 100

🔥 ~6x faster, stricter, configurable, extensible, and beautiful drop-in replacement for golint

5.5K starsJun 11, 2026 pushdevelopmentGoStatic Analysis
$ npx skills add mgechev/revive
#11

Bytecode Viewer

Similarity 125Trust 96Excellent 100

A Java 8+ Jar & Android APK Reverse Engineering Suite (Decompiler, Editor, Debugger & More)

16K starsApr 2, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add Konloch/bytecode-viewer
#12

Pylint

Similarity 125Trust 94Excellent 100

It's not just a linter that annoys you!

5.7K starsJun 9, 2026 pushdevelopmentPythonStatic Analysis
$ npx skills add pylint-dev/pylint
#13

Recaf

Similarity 123Trust 94Excellent 100

The modern Java bytecode editor

7.2K starsJun 15, 2026 pushdevelopmentJavaStatic Analysis
$ npx skills add Col-E/Recaf
#14

Ruff

Similarity 120Trust 95Excellent 100

An extremely fast Python linter and code formatter, written in Rust.

48K starsJun 14, 2026 pushdevelopmentRustStatic Analysis
$ npx skills add astral-sh/ruff
#15

Shellcheck

Similarity 120Trust 93Excellent 100

ShellCheck, a static analysis tool for shell scripts

40K starsJun 11, 2026 pushdevelopmentHaskellStatic Analysis
$ npx skills add koalaman/shellcheck
#16

Semgrep

Similarity 119Trust 98Excellent 100

Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.

16K starsJun 16, 2026 pushdevelopmentOCamlStatic Analysis
$ npx skills add semgrep/semgrep

How to choose

When should you switch?

Use an alternative when it has a clearer install path, higher trust score, fresher maintenance, or better platform fit for your current agent stack. Keep NullAway if it already passes your workflow test and repository review.

Next step

Compare top candidates side by side

Open the compare page, test the install commands in a sandbox, and check each repository before using a skill in production.