Static Analysis tool recommendation for Java? [closed]

Answer 1

IntelliJ IDEA from JetBrains. They also do ReSharper in the .Net community.

Answer 2

Couple of commercial vendors that have a Java offering:

Klocwork Coverity

They won't "fix the issues" they find (nor will, I believe, any of the other ones mentioned above) but these are all tools that have varying strengths.

Answer 3

• Findbugs
• PMD
• Checkstyle
• Lint4J
• Classycle
• JDepend
• SISSy
• Google Codepro

Answer 4

You can try JavaDepend, it complement other static analysis tools, and provides a CQL language to query code like database,

JavaDepend provides also many interactive views to understand the existing code base and more than 82 metrics.

Answer 5

FindBugs, PMD and Checkstyle are all excellent choices especially if you integrate them into your build process.

At my last company we also used Fortify to check for potential security problems. We were fortunate to have an enterprise license so I don't know the cost involved.

Answer 6

I recommend FindBugs. http://findbugs.sourceforge.net/ Good in assisting to do code review.