Software:FindBugs

From HandWiki
Short description: Software that finds possible errors in Java programs
FindBugs
Logo FindBugs.png
Developer(s)Bill Pugh and David Hovemeyer
Initial release10 June 2006; 17 years ago (2006-06-10)[1]
Written inJava
Operating systemCross-platform
TypeStatic code analysis
LicenseLesser GNU General Public License
Website{{{1}}}

FindBugs is an open-source static code analyser created by Bill Pugh and David Hovemeyer which detects possible bugs in Java programs.[2][3] Potential errors are classified in four ranks: (i) scariest, (ii) scary, (iii) troubling and (iv) of concern. This is a hint to the developer about their possible impact or severity.[4] FindBugs operates on Java bytecode, rather than source code. The software is distributed as a stand-alone GUI application. There are also plug-ins available for Eclipse,[5] NetBeans,[6] IntelliJ IDEA,[7][8][9] Gradle, Hudson,[10] Maven,[11] Bamboo[12] and Jenkins.[13]

Additional rule sets can be plugged in FindBugs to increase the set of checks performed.[14]

See also

External links

SpotBugs

SpotBugs
Spotbugs logo.png
Developer(s)SpotBugs team
Initial release23 October 2017; 6 years ago (2017-10-23)[15]
Stable release
4.6.0 / March 7, 2022; 23 months ago (2022-03-07)
RepositoryGitHub
Written inJava
Operating systemCross-platform
PredecessorFindBugs
LicenseGNU Lesser General Public License
WebsiteHomepage, Manual

SpotBugs is the spiritual successor of FindBugs, carrying on from the point where it left off with support of its community.

In 2016, the project lead of FindBugs was inactive but there are many issues in its community so Andrey Loskutov gave an announcement [16] to its community, and some volunteers tried creating a project with support for modern Java platform and better maintainability. On September 21, 2017, Andrey Loskutov again gave an announcement [17] about the status of new community, then released SpotBugs 3.1.0 [18] with support for Java 11 the new LTS, especially Java Platform Module System and invokedynamic instruction.

There are also plug-ins available for Eclipse,[19] IntelliJ IDEA,[20] Gradle,[21] Maven[22] and SonarQube.[23] SpotBugs also supports all of existing FindBugs plugins such as sb-contrib,[24] find-security-bugs,[25] with several minor changes.[26]

Applications

SpotBugs have numerous areas of applications:

  1. Testing during a Continuous Integration or Delivery Cycle.
  2. Locating faults in an application.
  3. During a code review.

External links

References

  1. "FindBugs 1.0.0 release date". http://sourceforge.net/p/findbugs/news/2006/06/findbugs-100-released/. 
  2. "FindBugs, Part 1: Improve the quality of your code". http://www.ibm.com/developerworks/java/library/j-findbug1/. 
  3. "FindBugs, Part 2: Writing custom detectors". http://www.ibm.com/developerworks/java/library/j-findbug2/. 
  4. Markus, Sprunck. "Findbugs – Static Code Analysis of Java". http://www.methodsandtools.com/tools/findbugs.php. Retrieved April 24, 2013. 
  5. "FindBugs Downloads". http://findbugs.sourceforge.net/downloads.html. 
  6. "Static Code Analysis in the NetBeans IDE Java Editor". https://netbeans.org/kb/docs/java/code-inspect.html. 
  7. idea-findbugs plug-in
  8. "Google Project Hosting". http://code.google.com/p/findbugs-idea/. 
  9. "QAPlug – quality assurance plugin". http://qaplug.com/. 
  10. "FindBugs Plugin". http://wiki.hudson-ci.org/display/HUDSON/FindBugs+Plugin. 
  11. "FindBugs Maven Plugin – Introduction". https://gleclaire.github.io/findbugs-maven-plugin/. 
  12. View FindBugs
  13. "Findbugs". https://wiki.jenkins-ci.org/display/JENKINS/FindBugs+Plugin. 
  14. "fb-contrib™: A FindBugs™ auxiliary detector plugin". http://fb-contrib.sourceforge.net/. 
  15. "SpotBugs 3.1.0 release date". 17 November 2021. https://github.com/spotbugs/spotbugs/blob/be024fea25b26cecdd2688598b8117ecf3c4a120/CHANGELOG.md. 
  16. Loskutov, Andrey (November 2, 2016). "[FB-Discuss Project status"]. https://mailman.cs.umd.edu/pipermail/findbugs-discuss/2016-November/004321.html. 
  17. Loskutov, Andrey (September 21, 2017). "[FB-Discuss Announcing SpotBugs as FindBugs successor"]. https://mailman.cs.umd.edu/pipermail/findbugs-discuss/2017-September/004383.html. 
  18. "Release SpotBugs 3.1.0 · spotbugs/spotbugs" (in en). https://github.com/spotbugs/spotbugs/releases/tag/3.1.0. 
  19. "SpotBugs Eclipse Plugin Update Site". https://spotbugs.github.io/eclipse/. 
  20. "SpotBugs-IDEA". https://plugins.jetbrains.com/plugin/14014-spotbugs. 
  21. "SpotBugs Gradle Plugin". https://plugins.gradle.org/plugin/com.github.spotbugs. 
  22. "SpotBugs Maven Plugin". https://spotbugs.github.io/spotbugs-maven-plugin/. 
  23. "sonar-findbugs". 15 November 2021. https://github.com/spotbugs/sonar-findbugs/. 
  24. "'spotbugs' branch in fb-contrib repo". https://github.com/mebigfatguy/fb-contrib. 
  25. "Find Security Bugs". https://find-sec-bugs.github.io/. 
  26. "Migration guide for Plugin Developers". https://spotbugs.readthedocs.io/en/stable/migration.html#for-plugin-developers.