Skip to content

Java static code analysis tools

Roman Ivanov edited this page Feb 25, 2020 · 15 revisions

SpotBugs: https://spotbugs.github.io/ (old FindBug: http://findbugs.sourceforge.net/)

PMD: http://pmd.sourceforge.net/

Java code validation at compile time: https://github.com/google/error-prone

Extension to Checkstyle: https://github.com/sschaef/checkstyle-teaching

Extension to Checkstyle: https://github.com/sevntu-checkstyle/sevntu.checkstyle

Extension to Checkstyle: https://github.com/startupheroes/startupheroes-checkstyle

Design Wizzard: https://sites.google.com/site/designwizardhomepage/description

Open JavaDoc Check: https://github.com/egonw/ojdcheck

Binary code analyzer: https://github.com/policeman-tools/forbidden-apis/

to apply code conventions into your projects: http://walkmod.com/services

Jlint(written in c++, binaries only for windows): http://jlint.sourceforge.net

Lint4j(a lot of plugins but last update 2007 year - dead project): http://www.jutils.com/index.html

Deprecated Sun dockcheck tool(no official sources, only some fork) http://dev.project.net/trac/pnet-community/browser/trunk/tools/doccheck?rev=6613&order=name

http://fbinfer.com - produces a list of potential bugs.

https://www.archunit.org/ - check imports, bunch of Checks can be written as Junit test.

http://spoon.gforge.inria.fr/first_analysis_processor.html - one more tool for code analysis base on AST.

=========================

JEP 190: Pluggable Static Analyzers: http://openjdk.java.net/jeps/190

Mail list thread for JEP 190: http://mail.openjdk.java.net/pipermail/compiler-dev/2014-January/008455.html

===================

All static code analysis tools integrators:

http://www.sonarqube.org/

http://qulice.com

========

Good list of tools https://pmd.github.io/pmd-6.0.0/pmd_userdocs_similarprojects.html

Clone this wiki locally