SpotBugs is a program that uses static analysis to look for bugs in Java code. It can detect a variety of common coding mistakes, including thread synchronization problems, misuse of API methods.
Compile Dependencies (5)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Code Analyzer
LGPL 2.1
| | com.github.spotbugs
»
spotbugs SpotBugs: Because it is easy! | 4.10.3 | 4.10.4 |
XML Processing
BSD 3-clause
|  | com.thoughtworks.xstream
»
xstream XStream is a simple and fast library to serialize objects to XML and back again with a low memory footprint. | 1.4.21 | ✔ |
I/O
Apache 2.0
|  | commons-io
»
commons-io The Apache Commons IO library contains utility classes, stream implementations, file filters, | 2.22.0 | ✔ |
Core Utils
Apache 2.0
|  | org.apache.commons
»
commons-lang3 Apache Commons Lang, a package of Java utility classes for the classes that are in java.lang's hierarchy, or are ... | 3.20.0 | ✔ |
 | org.sonarsource.java
»
sonar-java-plugin Code Analyzer for Java | 8.36.0.45637 | 8.40.0.46617 |
Provided Dependencies (4)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
LGPL
|  | com.h3xstream.findsecbugs
»
findsecbugs-plugin Core module of the project. It include all the SpotBugs detectors. | 1.14.0 | ✔ |
LGPL
|  | com.mebigfatguy.sb-contrib
»
sb-contrib An auxiliary findbugs.sourceforge.net plugin for java bug detectors that fall outside the narrow scope of detectors to ... | 7.7.4 | ✔ |
Logging
MIT
|  | org.slf4j
»
slf4j-api API for SLF4J (The Simple Logging Facade for Java) which serves as a simple facade or abstraction for various logging ... | 2.0.18 | ✔ |
LGPL 3.0
| | org.sonarsource.api.plugin
»
sonar-plugin-api Plugin API for SonarQube Server, SonarQube Cloud and SonarQube for IDE | 9.14.0.375 | 13.11.0.4459 |
Test Dependencies (8)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Assertion
Apache 2.0
|  | org.assertj
»
assertj-core Rich and fluent assertions for testing in Java | 3.27.7 | ✔ |
Testing
EPL 2.0
|  | org.junit.jupiter
»
junit-jupiter Module "junit-jupiter" of JUnit | 6.1.2 | 6.1.3 |
Mocking
MIT
|  | org.mockito
»
mockito-core Mockito mock objects library core API and implementation | 5.23.0 | ✔ |
LGPL 3.0
| | org.sonarsource.api.plugin
»
sonar-plugin-api-test-fixtures Plugin API for SonarQube Server, SonarQube Cloud and SonarQube for IDE | 13.8.0.4399 | 13.11.0.4459 |
LGPL 3.0
| | org.sonarsource.orchestrator » sonar-orchestrator | 6.3.1.4538 | 6.4.2.4626 |
LGPL 3.0
| | org.sonarsource.orchestrator » sonar-orchestrator-junit5 | 6.3.1.4538 | 6.4.2.4626 |
LGPL 3.0
| | org.sonarsource.sonarqube
»
sonar-ws Open source platform for continuous inspection of code quality | 9.9.9.104369 | 26.8.0.126808 |
Testing
BSD 3-clause
|  | xmlunit
»
xmlunit XMLUnit 1.x Compatibility Layer | 1.6 | 2.13.0 |