Java的静态分析工具推荐？
声明：本页面是StackOverFlow热门问题的中英对照翻译，遵循CC BY-SA 4.0协议，如果您需要使用它，必须同样遵循CC BY-SA许可，注明原文地址和作者信息，同时你必须将它归于原作者（不是我）：StackOverFlow
原文地址: http://stackoverflow.com/questions/97599/
Warning: these are provided under cc-by-sa 4.0 license. You are free to use/share it, But you must attribute it to the original authors (not me):
StackOverFlow
Static Analysis tool recommendation for Java?
提问by sergeb
Being vaguely familiar with the Java world I was googling for a static analysis tool that would also was intelligent enough to fix the issues it finds. I ran at CodePro tool but, again, I'm new to the Java community and don't know the vendors.
由于对 Java 世界有点熟悉，我在谷歌上搜索了一个静态分析工具，该工具也足够智能，可以修复它发现的问题。我使用过 CodePro 工具，但同样，我是 Java 社区的新手，不了解供应商。
What tool can you recommend based on the criteria above?
根据上述标准，您可以推荐什么工具？
采纳答案by Brian Matthews
FindBugs, PMD and Checkstyle are all excellent choices especially if you integrate them into your build process.
FindBugs、PMD 和 Checkstyle 都是很好的选择，尤其是当您将它们集成到您的构建过程中时。
At my last company we also used Fortifyto check for potential security problems. We were fortunate to have an enterprise license so I don't know the cost involved.
在我上一家公司，我们还使用Fortify来检查潜在的安全问题。我们很幸运拥有企业许可证，所以我不知道所涉及的成本。
回答by zxcv
I recommend FindBugs. http://findbugs.sourceforge.net/Good in assisting to do code review.
我推荐 FindBugs。 http://findbugs.sourceforge.net/擅长协助进行代码。
回答by SaaS Developer
IntelliJ IDEA from JetBrains. They also do ReSharper in the .Net community.
JetBrains 的 IntelliJ IDEA。他们还在 .Net 社区中做 ReSharper。
回答by Eduard Wirch
回答by Julien Hoarau
Sonaris a quality control tool. It gauges quality of Java applications through the observance of coding rules conventions, metric measures and advanced indicators.
声纳是一种质量控制工具。它通过遵守编码规则约定、度量标准和高级指标来衡量 Java 应用程序的质量。
Sonar is based on the following projects :
声纳基于以下项目：
JavaNCSS: Quality Metrics
Checkstyle: Style Cheking
PMD: Code scanning for potential errors.
Cobertura: Test Coverage
JavaNCSS：质量指标
Checkstyle: 风格检查
PMD：代码扫描潜在错误。
Cobertura：测试覆盖率
You could also use Simianfor duplication detection.
您还可以使用Simian进行重复检测。
回答by zvikico
All the above are great tools. PMD is probably the most common.
以上都是很好的工具。PMD 可能是最常见的。
Another tool is Enerjy. It recently became free, so you can download it and try for yourself. Enerjy is somewhat more organized and a better fit to larger teams. It makes it easier to customize and share the rules. Personally, I'm not a big fan, but maybe you'll fancy it more than I do.
另一个工具是Enerjy。它最近变得免费，因此您可以下载并亲自试用。Enerjy 更有条理，更适合大型团队。它可以更轻松地自定义和共享规则。就个人而言，我不是一个大粉丝，但也许你会比我更喜欢它。
回答by Epaga
回答by Epaga
Couple of commercial vendors that have a Java offering:
几个提供 Java 产品的商业供应商：
They won't "fix the issues" they find (nor will, I believe, any of the other ones mentioned above) but these are all tools that have varying strengths.
他们不会“解决他们发现的问题”（我相信，也不会解决上面提到的任何其他问题），但这些都是具有不同优势的工具。
回答by James from CppDepend Team
You can try JavaDepend, it complement other static analysis tools, and provides a CQL language to query code like database,
您可以尝试JavaDepend，它补充了其他静态分析工具，并提供了一种 CQL 语言来查询数据库等代码，
JavaDepend provides also many interactive views to understand the existing code base and more than 82 metrics.
JavaDepend 还提供了许多交互式视图来了解现有代码库和超过 82 个指标。
