From 4fe6cc3ccb338986a1bf401d80191d91042bcc31 Mon Sep 17 00:00:00 2001
From: Arpan Sharma <101162526+Arpan0995@users.noreply.github.com>
Date: Mon, 5 Oct 2026 09:49:52 -0500
Subject: [PATCH] Add PQC Migration Readiness to Code Analysis

---
 README_SOURCE.md | 1 +
 1 file changed, 1 insertion(+)

diff --git a/README_SOURCE.md b/README_SOURCE.md
index 6a64a9cd..37635e38 100644
--- a/README_SOURCE.md
+++ b/README_SOURCE.md
@@ -160,6 +160,7 @@ _Tools that provide metrics and quality measurements._
 - [OpenRewrite](https://github.com/openrewrite/rewrite) - Automates large-scale source-code refactoring through reusable recipes.
 - [OpenTaint](https://github.com/seqra/opentaint) - Interprocedural taint analyzer for Java and Spring applications with reusable security rules and dependency models.
 - [PMD](https://github.com/pmd/pmd) - Source code analysis for finding bad coding practices.
+- [PQC Migration Readiness](https://github.com/Arpan0995/pqc-migration-readiness) - Estimates post-quantum cryptography migration effort by finding quantum-vulnerable JCA usage and ranking each site by how hard it is to change.
 - [RealDiff](https://github.com/issacnitin/RealDiff) - Compares runtime method arguments and return values across Git revisions by running existing Maven or Gradle tests.
 - [RefactorFirst](https://github.com/jimbethancourt/RefactorFirst) - Identifies and prioritizes God Classes and Highly Coupled classes.
 - [SonarJava](https://github.com/SonarSource/sonar-java) - Static analyzer for SonarQube & SonarLint. (LGPL-3.0-only)