Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Java static code analysis

I am looking for eclipse/netbeans plugin or a tool, which analysis java project, and give us a report of unused imports, unused variables, unused methods, violating custom naming conventions, etc..

like image 749
Nageswaran Avatar asked Sep 12 '12 12:09

Nageswaran


People also ask

What is static code analysis?

Static analysis, also called static code analysis, is a method of computer program debugging that is done by examining the code without executing the program. The process provides an understanding of the code structure and can help ensure that the code adheres to industry standards.

Which tool is useful for static code analysis testing using Java?

FindBugs. While PMD works on source code, the FindBugs tool looks for code smells in compiled Java code. This Java static code analysis tool sifts through bytecode and finds sources of potential errors and security vulnerabilities via identification of coding errors such as: a Thread.

Is static code analysis worth?

One of the primary reasons why (static application security testing) static analysis is so important is that it lets you thoroughly analyze all of your code without even executing it. It is because of this fact that it is able to detect vulnerabilities in even the most distant and unattended portions of the code also.


1 Answers

Eclipse provides it as Markers. It will provide all your cases except violating custom naming conventions.

enter image description here

like image 92
Nandkumar Tekale Avatar answered Sep 27 '22 20:09

Nandkumar Tekale