ktlint
Spotbugs
ktlint | Spotbugs | |
---|---|---|
7 | 18 | |
6,009 | 3,347 | |
0.5% | 0.8% | |
9.5 | 9.6 | |
6 days ago | 4 days ago | |
Kotlin | Java | |
MIT License | GNU Lesser General Public License v3.0 only |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
ktlint
-
Setting up linting/formatting for an Android project
In my experience, I have faced these issues while trying to keep the code style consistent across the team - 1. ktlint and "Reformat Code" in Android Studio produce different outputs. This causes issues as most developers find it easier to use "Reformat Code" in AS but if you have a ktlint check on CI, the checks sometimes fail. 2. Different AS versions produce different `codeStyles.xml` file. Sometimes, on updating AS, it automatically adds new rules to the `codeStyles.xml` file. These rules might not be compatible with ktlint and might only work on specific AS versions.
-
Modern Android Development in 2023
Ktlint
-
Three features in Android Studio that maybe you've missed
Not even an Android Studio-specific feature, but rather a feature of the underlying IntelliJ. Just select Code > Analyze code > Silent code cleanup and your entire project will be cleaned up using the default linter (this can be combined awesomely with Ktlint).
-
Ask HN: What is a modern Java environment?
Ktlint + Detekt: Kotlin linting/static analysis (https://ktlint.github.io, https://detekt.github.io/detekt)
-
Adding Klint to my Android apps
Refs. Klint Page Klint Github
-
Supercharge your Kotlin Project
Linting is the process of analyzing code for potential errors and one of the ways we can do that in Kotlin is using Ktlint. As per the documentation:
Spotbugs
-
Handling EI_EXPOSE_REP & EI_EXPOSE_REP2 👨🏻💻
SpotBugs is a great tool for static code analysis. Recently I got two similar warnings in one of the codebases I work on and I had to fix it.
- Primeiros passos no desenvolvimento Java em 2023: um guia particular
-
Static Code Analyzer for JAVA development: any recommendations ??
SpotBugs is pretty good.
-
Ask HN: What is a modern Java environment?
PMD, Spotbugs, Nullaway: Java linting/static analysis (https://pmd.github.io, https://spotbugs.github.io, https://github.com/uber/NullAway)
- What are some useful static analyzers for Java?
- Go CheckLocks Analyzer
-
Is there a tool to track CVEs for the software that we use?
While at it you could also point them to static code analyzers such as error_prone, spotbugs and pmd (use all 3 at once - they complement each other in detecting different issues).
-
SpotBugs supports SARIF that supports integration with other SAST tools
First, it's better to use SpotBugs 4.4.1 and above, that includes a fix to make SARIF report compatible with Github code scanning API requirements.
-
Needing to run GUI application from java docker image
RUN wget https://github.com/spotbugs/spotbugs/releases/download/4.4.1/spotbugs-4.4.1.tgz
-
Looking for a Static Code Analysis tool for Scala Code
If you don’t have checkmarx/Vera code money, have you looked at https://find-sec-bugs.github.io/? It can be used with a few things such as https://spotbugs.github.io/ and sonarQ
What are some alternatives?
detekt - Static code analysis for Kotlin
SonarQube - Continuous Inspection
sonarlint-intellij - SonarLint for IntelliJ
FindBugs - The new home of the FindBugs project
ktfmt-gradle - A Gradle plugin to apply ktfmt to your builds, and reformat you Kotlin source code like a glimpse 🧹🐘
PMD - An extensible multilanguage static code analyzer.
dokka - API documentation engine for Kotlin
Error Prone - Catch common Java mistakes as compile-time errors
ktlint-gradle - A ktlint gradle plugin
Checkstyle - Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
CrunchyCalendar — awesome calendar widget for android apps - A beautiful material calendar with endless scroll, range selection and a lot more!
SonarJava - :coffee: SonarSource Static Analyzer for Java Code Quality and Security