findbugs is an open source static code analysis tool

A better way would be to talk just about warnings. The terms bug or bug pattern are used in a misleading way by Findbugs. warnings referring to possible performance issues. Each finding is reported as a warning, but not all of these warnings are necessarily defects, e.g. License & Pricing: Open Source ( Lesser GNU Public License)įindbugs scans for possible bugs in Java software. It is also an excellent motivation for improving the skills of development teams to write better code in the first place. Working with Findbugs helps to prevent from shipping avoidable issues. Although Findbugs needs the compiled class files it is not necessary to execute the code for the analysis. It scans byte code for so called bug pattern to find defects and/or suspicious code. a threshold for 'max lines of code perįunction').Markus Sprunck, Software Engineering Candies,įindbugs is an open source tool for static code analysis of Java programs. The analysis results can be explored in a separate view. Metrics are implemented asĬodan checkers. Metriculator statically analysis C++ source code and generates software metrics.

The latest nightly build is available for installation via update site at: See for more details like video demonstration and documentation. LSLOC, McCabe, EfferentCoupling) are already implemented. Its still under development but some major metrics (e.g. We have been working on an Eclipse CDT plug-in called metriculator. A free tool to check C/C++ source code against a set of coding standards?.What are some other portable open source C++ static analysis tools that anyone knows of and can be recommended? Use option -Weffc++ for GNU g++ (from answers).Mozilla's Pork (from answers) (This is now part of Oink).Finding the tools has not been easy task.īelow is a short list of C++ static analysis tools that were found or suggested by others. By using an open source tool, it could be modified to fit certain needs. The alternative is to find open source C++ static analysis tools that will run on multiple platforms (Windows and Unix). Although having such products are great, the cost is just way too much for students and it is usually rather hard to get trial version. Those tools are easy to use, very helpful, runs on multiple operating systems and free.Ĭommercial C++ static analysis products are available. Java has some very good open source static analysis tools such as FindBugs, Checkstyle and PMD.

Findbugs is an open source static code analysis tool