Read the rules
Every rule implementation is in the open. When an issue is raised on your code, you can trace it to the exact analyzer logic that produced it.
Sonar · Source-Available
The analyzers and agent tooling, source open to read.
Every public Sonar project released under the Sonar Source-Available License (SSAL): the language analyzers that power every Sonar product, the frameworks beneath them, the SonarQube MCP Server, and the plugins that put code quality checks inside the agent coding loop.
0
projects
0
categories
Source-available projects
Open Core, in practice
01
02
03
Why these projects are source-available
Sonar's analyzers represent the bulk of our research investment: thousands of rules, taint analysis engines, and language parsers refined over years. Publishing the source keeps that work inspectable and extensible while protecting the research that funds it.
File and fix
Issues and pull requests are public. False positives get reported against real code, and the community shapes rule behavior directly.
Built for the agent loop
The MCP Server and agent plugins put Sonar analysis where code is now written, so quality gates apply to agent-generated and human-written code alike.
Agents write more code than ever, and it all still has to be verified. That verification step is the core of the Agent Centric Development Cycle.
Read about AC/DCLicensing
Every project listed here is governed by the SONAR Source-Available License v1.0, last updated November 13, 2024. Read the full license text before you build on any of them — the summary below is orientation, not legal advice.
SSAL-1.0
What the license grants
The right to use, copy, modify, and redistribute the source. You can read the rule implementations, build from source, patch behavior locally, and fork for your own internal use.
SSAL-1.0
The primary restriction
You may not use the software for a Competing purpose, which the license defines as “marketing a product or service as a substitute for the functionality or value of SonarQube” — regardless of interface, platform, language, or whether it is free. This restriction is what separates SSAL from an open source license.
LGPL-3.0
Looking for open source?
The SonarQube Server core, scanners, SonarQube for IDE clients, and the plugin API are GPL and LGPL licensed. Browse our open source projects →
Source-available is not open source. SSAL publishes the source and grants the right to use, copy, modify, and redistribute it, with one primary restriction: you may not use it for a Competing purpose, meaning a product or service marketed as a substitute for the functionality or value of SonarQube. That restriction places SSAL outside the OSI definition of open source, which is why these projects are listed apart from the GPL and LGPL projects.