Meziantou.Analyzer

Meziantou.Analyzer is a powerful C# Roslyn analyzer that uses static analysis to detect bugs, surface security issues, and enforce best practices. It helps you catch real-world problems early—before they reach production—by analyzing your code as you write it and providing automated fixes when possible. Designed for both human developers and AI-assisted workflows, it acts as a safety net to keep your code reliable, consistent, and maintainable.

Installation

Install the NuGet package Meziantou.Analyzer

dotnet package add Meziantou.Analyzer

Central Package Management

If you're using Central Package Management, add Meziantou.Analyzer as a GlobalPackageReference in your Directory.Packages.props file. This applies the analyzer to all projects in the repository.

<ItemGroup>
  <GlobalPackageReference Include="Meziantou.Analyzer" Version="..." />
</ItemGroup>

Rules

If you are already using other analyzers, you can check which rules are duplicated with well-known analyzers

Suppressions

Refactorings

Configuration

You can set the <MeziantouAnalysisMode> MSBuild property to configure the default severity of the rules. Supported values are:

• Default: Uses each rule's default severity
• None: Disables all rules by default
• all-suggestions: Sets all rules to suggestion
• all-warnings: Sets all rules to warning
• all-errors: Sets all rules to error

<Project>
  <PropertyGroup>
    <MeziantouAnalysisMode>all-warnings</MeziantouAnalysisMode>
  </PropertyGroup>
</Project>

Analyzing generated code

The rules skip generated code, as analyzing it costs build time and you cannot fix code you do not own. Set the MEZIANTOU_ANALYZER_GENERATED_CODE environment variable to true (or 1) to opt in, which makes the rules analyze generated code:

MEZIANTOU_ANALYZER_GENERATED_CODE=true

Note that the analyzers run in a long-lived process. After changing the variable, run dotnet build-server shutdown and rebuild, or restart your IDE.

Opting in does not report anything by itself: report_generated_code decides whether a rule reports the diagnostics located in the generated code it analyzes, for a single rule or for all of them at once:

[*.cs]
# All the rules report the diagnostics located in generated code
MA.report_generated_code = true

# MA0051 does not, as a rule specific value wins over the value of all the rules
MA0051.report_generated_code = false

A few rules analyze generated code without the variable, and report in it by default, such as the Blazor rules that work on the code generated from the .razor files.

See Analyzing generated code for the list of those rules and for the detection of the generated files.