Edit me

Similar to PMD

Open Source

  • Checkstyle - Very detailed, supports both Maven and Ant. Uses ANTLR.
  • DoctorJ - Uses JavaCC. Checks Javadoc, syntax and calculates metrics.
  • ESC/Java - Finds null dereference errors, array bounds errors, type cast errors, and race conditions. Uses Java Modeling Language annotations.
  • FindBugs - works on bytecode, uses BCEL. Source code uses templates, nifty stuff!
  • SpotBugs - SpotBugs is the spiritual successor of FindBugs, carrying on from the point where it left off with support of its community.
  • Hammurapi - Uses ANTLR, excellent documentation, lots of rules
  • Jamit - bytecode analyzer, nice graphs
  • JCSC - Does a variety of coding standard checks, uses JavaCC and the GNU Regexp package.
  • Jikes - More than a compiler; now it reports code warnings too
  • JLint - Written in C++. Uses data flow analysis and a lock graph to do lots of synchronization checks. Operates on class files, not source code.
  • JPathFinder - A verification VM written by NASA; supports a subset of the Java packages
  • JWiz - Research project, checks some neat stuff, like if you create a Button without adding an ActionListener to it. Neat.

Commercial

  • AppPerfect - 750 rules, produces PDF/Excel reports, supports auto-fixing problems
  • Assent - The usual stuff, seems pretty complete.
  • Aubjex - Rules aren’t listed online. Appears to have some code modification stuff, which would be cool to have in PMD. $299.
  • AzoJavaChecker - Rules aren’t listed online so it’s hard to tell what they have. Not sure how much it costs since I don’t know German.
  • CodePro AnalytiX - Eclipse plug-in, extensive audit rules, JUnit test generation/editing, code coverage and analysis
  • Enerjy Java Code Analyser - 200 rules, lots of IDE plugins
  • Flaw Detector - In beta, does control/data flow analysis to detect NullPointerExceptions
  • JStyle - $995, nice folks, lots of metrics and rules
  • JTest - Very nice with tons of features, but also very expensive and requires a running X server (or Xvfb) to run on Linux. They charge $500 to move a license from one machine to another.
  • Lint4J - Lock graph, DFA, and type analysis, many EJB checks
  • SolidSDD - Code duplication detection, nice graphical reporting. Free licensing available for Educational or OSS use.

Similar to CPD

Commercial

  • Simian - fast, works with Java, C#, C, CPP, COBOL, JSP, HTML
  • Simscan - free for open source projects

High level reporting

  • XRadar - Agregates data from a lot of code quality tool to generate a full quality dashboard.
  • Sonar - Pretty much like XRadar, but younger project, fully integrated to maven 2 (but requires a database)
  • Maven Dashboard - Same kind of agregator but only for maven project.
  • QALab - Yet another maven plugin…