Spotbugs
Quarkus
Our great sponsors
Spotbugs | Quarkus | |
---|---|---|
17 | 127 | |
3,331 | 13,072 | |
1.4% | 1.4% | |
9.6 | 10.0 | |
9 days ago | 4 days ago | |
Java | Java | |
GNU Lesser General Public License v3.0 only | Apache License 2.0 |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
Spotbugs
- Primeiros passos no desenvolvimento Java em 2023: um guia particular
-
Static Code Analyzer for JAVA development: any recommendations ??
SpotBugs is pretty good.
-
Ask HN: What is a modern Java environment?
PMD, Spotbugs, Nullaway: Java linting/static analysis (https://pmd.github.io, https://spotbugs.github.io, https://github.com/uber/NullAway)
- What are some useful static analyzers for Java?
- Go CheckLocks Analyzer
-
Is there a tool to track CVEs for the software that we use?
While at it you could also point them to static code analyzers such as error_prone, spotbugs and pmd (use all 3 at once - they complement each other in detecting different issues).
-
SpotBugs supports SARIF that supports integration with other SAST tools
First, it's better to use SpotBugs 4.4.1 and above, that includes a fix to make SARIF report compatible with Github code scanning API requirements.
-
Needing to run GUI application from java docker image
RUN wget https://github.com/spotbugs/spotbugs/releases/download/4.4.1/spotbugs-4.4.1.tgz
-
Looking for a Static Code Analysis tool for Scala Code
If you don’t have checkmarx/Vera code money, have you looked at https://find-sec-bugs.github.io/? It can be used with a few things such as https://spotbugs.github.io/ and sonarQ
-
An Incomplete List of Practical Security for Mortals
some good tools for general code analysis (Java): Sonarqube, PMD, SpotBugs
Quarkus
-
How Netflix Uses Java
Meanwhile, if you're building something smaller than Netflix, I'm writing a book just for that (https://opinionatedlaunch.com/).
It's about mobile apps, but I talk about backend at great length, especially since my background is Java. The book is called "opinionated" because I cover Quarkus (https://quarkus.io/), monolith, Fly.io, and no K8s.
-
Analyze and debug Quarkus based AWS Lambda functions with X-Ray
Quarkus is a Java based framework tailored for GraalVM and HotSpot, which results in an amazingly fast boot time while having an incredibly low memory footprint. It offers near instant scale up and high density memory utilization which can be very useful for container orchestration platforms like Kubernetes or Serverless runtimes like AWS Lambda.
-
Quarkus : Greener, Better, Faster, Stronger
Other useful articles related to Quarkus extension development can be found under the Writing Extensions guide category on the Quarkus.io website.
-
Quarkus 3.4 - Container-first Java Stack: Install with OpenJDK 21 and Create REST API
Quarkus is one of Java frameworks for microservices development and cloud-native deployment. It is developed as container-first stack and working with GraalVM and HotSpot virtual machines (VM).
- Java 21 Released
-
Java 21 makes me like Java again
If you GraalVM Native Image or one of the frameworks based on it then bootstrap cost disappears:
https://quarkus.io
-
Mentorship Group
We are open to practice using any open-source project, however, we want to set a sharp focus on projects maintained by the Red Hat, and our own projects in the Caravana Cloud organization on github. If there is no reason to do differently, we'll build using technologies such as OpenShift, Quarkus, Ansible and related projects.
- Como desenvolvi um backend web em Clojure
-
Is anyone using Quarkus for monoithic, full-stack web apps?
The Quarkus you are talking about is this one? https://quarkus.io/
- Quarkus 3.1.0.Final released - Programmatic creation of Reactive REST Clients, Kotlin 1.8.21 and more
What are some alternatives?
SonarQube - Continuous Inspection
ktor - Framework for quickly creating connected applications in Kotlin with minimal effort
FindBugs - The new home of the FindBugs project
Micronaut - Micronaut Application Framework
PMD - An extensible multilanguage static code analyzer.
helidon - Java libraries for writing microservices
Error Prone - Catch common Java mistakes as compile-time errors
Spring Boot - Spring Boot
Checkstyle - Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.
spring-native - Spring Native is now superseded by Spring Boot 3 official native support
SonarJava - :coffee: SonarSource Static Analyzer for Java Code Quality and Security
javalin - A simple and modern Java and Kotlin web framework [Moved to: https://github.com/javalin/javalin]