Java AnalyzerHub
Curated Reading List

Static Analyzers for Java Code

A hand-picked collection of IDE-integrated, commercial, and open-source static analysis tools for catching bugs, code smells, and security vulnerabilities in Java before they ship.

1 IDE-Integrated & Commercial

  1. IntelliJ IDEA — Built-in code inspector and analyzer for Java and Kotlin
  2. SonarSource — Pattern matching and dataflow analysis to find code smells, bugs, and vulnerabilities
  3. PVS-Studio — Builds a well-designed AST model with semantic information for deep analysis

2 Open-Source Analyzers

  1. SpotBugs — Static analysis to look for bugs in Java code
  2. PMD — An extensible cross-language static code analyzer