{"id":25050491,"url":"https://github.com/smartdec/smartcheck","last_synced_at":"2025-12-29T23:47:13.145Z","repository":{"id":37493039,"uuid":"120319664","full_name":"smartdec/smartcheck","owner":"smartdec","description":" SmartCheck – a static analysis tool that detects vulnerabilities and bugs in Solidity programs (Ethereum-based smart contracts).","archived":false,"fork":false,"pushed_at":"2023-05-25T14:10:02.000Z","size":1038,"stargazers_count":368,"open_issues_count":2,"forks_count":90,"subscribers_count":21,"default_branch":"master","last_synced_at":"2025-02-02T07:47:57.090Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"HTML","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"gpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/smartdec.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2018-02-05T15:00:56.000Z","updated_at":"2025-01-29T12:13:18.000Z","dependencies_parsed_at":"2022-08-02T01:09:50.105Z","dependency_job_id":"6c37055a-45b7-4b76-866d-3e3a9194be09","html_url":"https://github.com/smartdec/smartcheck","commit_stats":{"total_commits":516,"total_committers":20,"mean_commits":25.8,"dds":0.6782945736434108,"last_synced_commit":"a2d652efe0ebb68fcf04dabe265b7f630d82b9ff"},"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smartdec%2Fsmartcheck","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smartdec%2Fsmartcheck/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smartdec%2Fsmartcheck/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smartdec%2Fsmartcheck/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/smartdec","download_url":"https://codeload.github.com/smartdec/smartcheck/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":237446276,"owners_count":19311291,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2025-02-06T09:03:42.773Z","updated_at":"2025-10-21T06:31:49.455Z","avatar_url":"https://github.com/smartdec.png","language":"HTML","funding_links":[],"categories":["Vulnerability-based Dataset","📖 Contents","\u003ca name=\"tools\"\u003e\u003c/a\u003e Tools","Static Analysis"],"sub_categories":["Security Analysis Tool","Security Analysis Tools for SC","\u003ca name=\"sast\"\u003e SAST/DAST/Unity Test Analysis"],"readme":"# SmartCheck\n\nSmartCheck is an extensible static analysis tool for discovering vulnerabilities and other code issues\nin Ethereum smart contracts written in the Solidity programming language.\n\nSmartCheck is described in the academic paper titled\n[\"SmartCheck: Static Analysis of Ethereum Smart Contracts\"](https://hdl.handle.net/10993/35862)\nas released on May 27, 2018.\n\n\u003e :warning: **Warning**\n\u003e\n\u003e The project is deprecated since 2020. The analysis might work incorrectly for Solidity versions starting with 0.6.0.\n\u003e \n\u003e Web version of SmartCheck that was available [online](https://tool.smartdec.net/) earlier is shut down.\n\n## Using NPM package\n### Install SmartCheck globally\nTo install SmartCheck globally to your system run (administrative rights required)\n```bash\nnpm install @smartdec/smartcheck -g\n```\n### (Optional) Add SmartCheck as development dependency\nTo add and install SmartCheck as development dependency to your npm project run:\n```bash\nnpm install --save-dev @smartdec/smartcheck\n```\n\n### Start the analysis\nTo start analysis simply run:\n```bash\nsmartcheck -p .\n```\nRequired argument: `-p \u003cpath to directory or file\u003e`.\nOptional argument: `-r \u003cpath to .xml-file with rules\u003e`; by default it uses the built-in rules files.\n\n## Using source code of SmartCheck\n\n\u003e ⚠️ **Warning**\n\u003e\n\u003e SmartCheck works only with older java8 versions, e.g. 8u102.\n\u003e You can download version for Windows from the [archive](https://www.oracle.com/ru/java/technologies/javase/javase8-archive-downloads.html).\n\n\n### Building the project\nThe project uses Maven. To build it, execute in the project directory:\n\n```bash\n$ mvn clean package\n```\n\n### Start the analysis\n\n```bash\n$ java -jar target/smartcheck-2.0-SNAPSHOT-jar-with-dependencies.jar -p \u003cpath to directory or file\u003e\n```\n\nOptional argument: `-r \u003cpath to .xml-file with rules\u003e`; by default it uses the built-in rules files.\n\nAnalysis can also be started from an IDE by running the `ru.smartdec.smartcheck.app.cli.Tool.main()` method.\n\n## Advanced\n### View the parse tree in a graphical form\n\n```bash\n$ mvn exec:java@tree -Dexec.args=\"-p \u003cpath to the file\u003e\"\n```\n\nIt can also be done from an IDE by running the `ru.smartdec.smartcheck.app.cli.TreeView.main()` method.\n\n### View the parse tree as XML\n\n```bash\n$ mvn exec:java@xml -Dexec.args=\"-t \u003cpath to save xml-tree\u003e -s \u003cpath to the file\u003e\"\n```\n\nIt can also be done from an IDE by running the `ru.smartdec.smartcheck.app.cli.XmlView.main()` method.\n\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsmartdec%2Fsmartcheck","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsmartdec%2Fsmartcheck","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsmartdec%2Fsmartcheck/lists"}