Java static-code-analysis

Open-source Java projects categorized as static-code-analysis

Top 11 Java static-code-analysis Projects

  • Checkstyle

    Checkstyle is a development tool to help programmers write Java code that adheres to a coding standard. By default it supports the Google Java Style Guide and Sun Code Conventions, but is highly configurable. It can be invoked with an ANT task and a command line program.

    Project mention: 5 easy paths to become a recognized Java expert. Really. For free. | | 2022-08-25
  • PMD

    An extensible multilanguage static code analyzer.

    Project mention: Spring Boot – Black Box Testing | | 2022-11-13

    The generated classes should be put into .gitignore. Otherwise, if you have Checkstyle, PMD, or SonarQube in your project, then generated classes can violate some rules. Besides, if you don't put them into .gitignore, then each pull request might become huge due to the fact that even a slightest fix can lead to lots of changes in the generated classes.

  • InfluxDB

    Build time-series-based applications quickly and at scale.. InfluxDB is the Time Series Platform where developers build real-time applications for analytics, IoT and cloud-native services. Easy to start, it is available in the cloud or on-premises.

  • NullAway

    A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

    Project mention: Retrofitting null-safety onto Java at Meta | | 2022-11-22

    Does anyone have experience using this at Meta who can compare to ?

  • Spotbugs

    SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

    Project mention: Primeiros passos no desenvolvimento Java em 2023: um guia particular | | 2023-01-19
  • phpinspectionsea

    A Static Code Analyzer for PHP (a PhpStorm/Idea Plugin)

    Project mention: 7 Laravel Packages to Improve Coding Standards and Reduce Bugs | | 2022-08-01

    PHP Inspections is a static code analyzer and code review tool for PhpStorm IDE.

  • SonarJava

    :coffee: SonarSource Static Analyzer for Java Code Quality and Security

  • sonar-php

    :elephant: SonarPHP: PHP static analyzer for SonarQube & SonarLint

    Project mention: How does one get this "PHP Control Flow Viewer" sidebar? | | 2022-02-10
  • Sonar

    Write Clean Java Code. Always.. Sonar helps you commit clean code every time. With over 600 unique rules to find Java bugs, code smells & vulnerabilities, Sonar finds the issues while you focus on the work.

  • warnings-ng-plugin

    Jenkins Warnings Plugin - Next Generation

    Project mention: How do you setup coverage/ sanitizers in your CI system. | | 2023-01-27

    Jenkins for C/C++, at least, also has a small bus factor ( Without Jenkins would be little more than a daemon that triggers builds as a reaction to a webhook on pushing. He basically maintains, alone, and other stuff.

  • forbidden-apis

    Policeman's Forbidden API Checker

    Project mention: Stop Using Utcnow and Utcfromtimestamp | | 2022-10-09

    > All this stuff would be a lot easier if timezones always had to be stated explicitly.

    On Java, you can use the forbidden-apis build plugin ( to fail the build whenever a timezone or locale or charset is not specified explicitly (it forbids the methods from the Java API which use an implicit timezone/locale/charset). I don't know whether there's something similar for Python; it might be harder because Python is much more dynamic (though it might be possible to use monkeypatching to warn whenever the bad methods are used).

  • fb-contrib

    a FindBugs/SpotBugs plugin for doing static code analysis for java code bases

  • violation-comments-to-github-command-line

    Report static code analysis to GitHub

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2023-01-27.

Java static-code-analysis related posts


What are some of the best open-source static-code-analysis projects in Java? This list will help you:

Project Stars
1 Checkstyle 7,497
2 PMD 4,127
3 NullAway 3,222
4 Spotbugs 2,939
5 phpinspectionsea 1,358
6 SonarJava 985
7 sonar-php 344
8 warnings-ng-plugin 317
9 forbidden-apis 282
10 fb-contrib 133
11 violation-comments-to-github-command-line 3
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives