What are some useful static analyzers for Java?

1. Spotbugs

   1 19 3,634 9.6 Java

   SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.

   

2. InfluxDB

   influxdata.com featured

   InfluxDB high-performance time series database. Collect, organize, and act on massive volumes of high-resolution data to power real-time intelligent systems.

   

3. find-sec-bugs

   2 8 2,330 5.1 Java

   The SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)

   

   SpotBugs have a lot of extensions such as https://find-sec-bugs.github.io/ https://github.com/KengoTODA/findbugs-slf4j and more, I recommend adding them as well

4. gradle-errorprone-plugin

   3 1 379 7.6 Kotlin

   Gradle plugin to use the error-prone compiler for Java

   

   In personal projects, I've had good experiences using the error-prone compiler plugin with uber's nullaway.

5. NullAway

   4 22 3,727 9.1 Java

   A tool to help eliminate NullPointerExceptions (NPEs) in your Java code with low build-time overhead

   

   In personal projects, I've had good experiences using the error-prone compiler plugin with uber's nullaway.

6. forbidden-apis

   5 4 347 7.1 Java

   Policeman's Forbidden API Checker

   

   Besides the classic pmd/stopbugs/jacoco/owasp, a favorite of mine is forbidden-apis.

7. findbugs-slf4j

   6 1 75 0.0 Java

   A SpotBugs/FindBugs plugin to verify usage of SLF4J

   

   SpotBugs have a lot of extensions such as https://find-sec-bugs.github.io/ https://github.com/KengoTODA/findbugs-slf4j and more, I recommend adding them as well

8. fb-contrib

   7 1 157 8.5 Java

   a FindBugs/SpotBugs plugin for doing static code analysis for java code bases

   

   and https://github.com/mebigfatguy/fb-contrib

9. CodeRabbit

   coderabbit.ai featured

   CodeRabbit: AI Code Reviews for Developers. Revolutionize your code reviews with AI. CodeRabbit offers PR summaries, code walkthroughs, 1-click suggestions, and AST-based analysis. Boost productivity and code quality across all major languages with each PR.

   

Suggest a related project