Static Analysis tool recommendation for Java?

Question

Being vaguely familiar with the Java world I was googling for a static analysis tool that would also was intelligent enough to fix the issues it finds. I ran at CodePro tool but, again, I'm new to the Java community and don't know the vendors.

What tool can you recommend based on the criteria above?

Solution 1

FindBugs, PMD and Checkstyle are all excellent choices especially if you integrate them into your build process.

At my last company we also used Fortify to check for potential security problems. We were fortunate to have an enterprise license so I don't know the cost involved.

Solution 2

• Findbugs
• PMD
• Checkstyle
• Lint4J
• Classycle
• JDepend
• SISSy
• Google Codepro

Solution 3

I recommend FindBugs. http://findbugs.sourceforge.net/ Good in assisting to do code review.

Solution 4

IntelliJ IDEA from JetBrains. They also do ReSharper in the .Net community.

Solution 5

Sonar is a quality control tool. It gauges quality of Java applications through the observance of coding rules conventions, metric measures and advanced indicators.

Sonar is based on the following projects :

• JavaNCSS: Quality Metrics

• Checkstyle: Style Cheking

• PMD: Code scanning for potential errors.

• Cobertura: Test Coverage

You could also use Simian for duplication detection.

View more solutions