I analyze the debian source packages I find here: ftp://ftp.se.debian.org/debian/pool/main/
If you have an alternative location that you would prefer let me know. Maybe there is some better location with "bleeding edge" source code for instance. > The format can be anything you like as long as it is machine-readable. Imagine I analyze these packages: ftp://ftp.se.debian.org/debian/pool/main/a/a2jmidid/a2jmidid_8~dfsg0.orig.tar.bz2 ftp://ftp.se.debian.org/debian/pool/main/a/a2ps/a2ps_4.14.orig.tar.gz How about some format like this: [ { "package" : "a2jmidid", "results" : "http://www.cppcheck.net/devinfo/daca2/a2jmidid.txt" }, { "package" : "a2ps", "results" : "http://www.cppcheck.net/devinfo/daca2/a2ps.txt" } ] > PS: have cppcheck folks considered supporting the firehose static > analysis results format? I am not against that additional output formats are added. However I would like to understand the reason for doing it. I have the impression that firehose has some builtin cppcheck-import function. Best regards, Daniel Marjamäki