SpotBugs is a program that uses static analysis to look for bugs in Java code. It can detect a variety of common coding mistakes, including thread synchronization problems, misuse of API methods.
| License | LGPL 3.0 |
|---|---|
| Categories | Sonar Plugins |
| Tags | plugingithubanalysissonarfindbugs |
| Organization | SpotBugs Team |
| HomePage | https://github.com/spotbugs/sonar-findbugs/ 🔍 Inspect URL |
| Date | Mar 06, 2025 |
| Files | pom (18 KB) sonar-plugin (39.9 MB) View All |
| Repositories | Central |
| Ranking | #658259 in MvnRepository (See Top Artifacts) #143 in Sonar Plugins |
Compile Dependencies (5)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
| Code Analyzer LGPL 2.1 | com.github.spotbugs » spotbugs | 4.9.2 | 4.9.8 | |
| XML Processing BSD 3-clause | com.thoughtworks.xstream » xstream | 1.4.21 | ✔ | |
| I/O Apache 2.0 | commons-io » commons-io | 2.18.0 | 2.21.0 | |
| Sonar Plugin | org.sonarsource.java » sonar-java-plugin | 8.9.0.37768 | 8.20.0.40630 | |
LGPL 3.0 | org.sonarsource.sslr-squid-bridge » sslr-squid-bridge | 2.7.1.392 | ✔ |
Provided Dependencies (4)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
LGPL | com.h3xstream.findsecbugs » findsecbugs-plugin | 1.13.0 | 1.14.0 | |
LGPL | com.mebigfatguy.sb-contrib » sb-contrib | 7.6.9 | 7.7.0 | |
| Logging MIT | org.slf4j » slf4j-api | 2.0.16 | 2.0.17 | |
LGPL 3.0 | org.sonarsource.api.plugin » sonar-plugin-api | 9.17.0.587 | 13.4.0.3221 |
Test Dependencies (8)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
| Assertion Apache 2.0 | org.assertj » assertj-core | 3.27.3 | 3.27.6 | |
| Testing EPL 2.0 | org.junit.jupiter » junit-jupiter | 5.11.4 | 6.0.1 | |
| Mocking MIT | org.mockito » mockito-core | 5.15.2 | 5.20.0 | |
LGPL 3.0 | org.sonarsource.api.plugin » sonar-plugin-api-test-fixtures | 10.14.0.2599 | 13.4.0.3221 | |
LGPL 3.0 | org.sonarsource.orchestrator » sonar-orchestrator | 5.1.0.2254 | 6.0.0.3852 | |
LGPL 3.0 | org.sonarsource.orchestrator » sonar-orchestrator-junit5 | 5.1.0.2254 | 6.0.0.3852 | |
LGPL 3.0 | org.sonarsource.sonarqube » sonar-ws | 9.9.8.100196 | 25.11.0.114957 | |
| Testing BSD 3-clause | xmlunit » xmlunit | 1.6 | 2.11.0 |
Licenses
| License | URL |
|---|---|
| GNU LGPL 3 | http://www.gnu.org/licenses/lgpl.txt |
Developers
| Name | Dev Id | Roles | Organization | |
|---|---|---|---|---|
| Evgeny Mandrikov | godin | SonarSource | ||
| Nicolas Peru | benzonico | SonarSource |
Related Books
| SonarQube in Action (2013) by Campbell, G. Ann | |
| SonarQube in Action (2013) by Papapetrou, Patroklos | |
| Sonar Code Quality Testing Essentials (2012) by S. Arapidis, Charalampos |