Static Code Analysis, Defect Detection, Code Smells, Architecture Smells, Dependency Analysis

FindBugs Descriptions

• Bad Practice
• Correctness
• Experimental
• Malicious Code Vulnerability
• Multithreaded Correctness
• Performance
• Security
• Dodgy Practices

PMD Rulesets

Lint4J checks for

• Architectual problems
• Contracts defined in the Java core API
• Java Language Constructs
• Immature code
• Performance
• Code portability
• The Serialization and Externalization contracts
• Suspicious coding and likely bugs
• Java Synchronization and Scalability
• Coding patterns that impact readability and code size
• Violations of the EJB specification

JLint Program Checker

Coverity Static Analysis, Dynamic Analysis , Architectural Analysis

NASA's JPF (Java Path Finder)
Which defects can be found by JPF? Out of the box, JPF can search for deadlocks and unhandled exceptions (e.g. NullPointerExceptions and AssertionErrors), but the user can provide own property classes, or write listener-extensions to implement other property checks. A number of such extensions, like race condition and heap bounds checks are included in the JPF distribution 

Hammurabi Hammurapi is a code quality governance platform to mitigate risks of outsourcing* of software development.

Structure 101