PMD is a source code analyzer. It finds common programming flaws like unused variables, empty catch blocks, unnecessary object creation, and so forth. It supports many languages. It can be extended with custom rules. It uses JavaCC and Antlr to parse source files into abstract syntax trees (AST) and runs rules against them to find violations. Rules can be written in Java or using a XPath query. It supports Java, JavaScript, Salesforce.com Apex and Visualforce, ...

LicenseBSD
CategoriesCode Analyzers
Tagsanalysiscodeanalyzerquality
Organization PMD
HomePage https://pmd.github.io/
DateJul 25, 2020
Filespom (45 KB)  View All
RepositoriesCentralMulesoft
Ranking#20315 in MvnRepository (See Top Artifacts)
#6 in Code Analyzers
Used By19 artifacts
VulnerabilitiesVulnerabilities from dependencies:
CVE-2023-2976
CVE-2022-42889
CVE-2022-24329
View 9 more ...

Note: There is a new version for this artifact

New Version7.1.0


Compile Dependencies (0)

Category/License Group / ArtifactVersionUpdates

Managed Dependencies (36)

Category/License Group / ArtifactVersionUpdates
CLI Parser
Apache 2.0
com.beust » jcommander 1.721.82

Unlicense
com.github.oowekyala.treeutils » tree-matchers 2.1.0

Unlicense
com.github.oowekyala.treeutils » tree-printers 2.1.0

CPAL 1.0CPL 1.0
com.github.stefanbirkner » system-rules 1.19.0
Mocking
Apache 2.0
com.github.tomakehurst » wiremock 1.573.0.1
Core Utils
Apache 2.0
com.google.guava » guava2 vulnerabilities 29.0-android33.2.0-jre
I/O
Apache 2.0
commons-io » commons-io1 vulnerability 2.62.16.1

Apache 2.0
io.kotlintest » kotlintest-assertions 3.1.83.4.2

Apache 2.0
io.kotlintest » kotlintest-core 3.1.83.4.2
XPath
BSD 2-clause
jaxen » jaxen 1.1.62.0.0
Testing
EPL 2.0
junit » junit1 vulnerability 4.135.10.2
Parser Generator
BSD
net.java.dev.javacc » javacc 5.07.0.13

BSD
net.sourceforge.pmd » pmd-core 6.26.07.1.0

BSD
net.sourceforge.pmd » pmd-test 6.26.07.1.0

BSD
net.sourceforge.pmd » pmd-lang-test 6.26.07.1.0

MPL 2.0
net.sourceforge.saxon » saxon 9.1.0.812.4

MPL 2.0
net.sourceforge.saxon » saxon 9.1.0.812.4
Parser Generator
BSD 3-clause
org.antlr » antlr4-runtime 4.74.13.1

BSD 3-clause
org.antlr » antlr-runtime 3.5.24.13.1
Build Tool
Apache 2.0
org.apache.ant » ant4 vulnerabilities 1.10.11.10.14

Apache 2.0
org.apache.ant » ant-testutil 1.10.11.10.14
Core Utils
Apache 2.0
org.apache.commons » commons-lang3 3.8.13.14.0
String Utils
Apache 2.0
org.apache.commons » commons-text1 vulnerability 1.61.12.0
JVM Languages
Apache 2.0
org.codehaus.groovy » groovy1 vulnerability 2.4.74.0.21
Testing
BSD 3-clause
org.hamcrest » hamcrest 2.2
Defect Detection
Apache 2.0
org.jetbrains » annotations 13.024.1.0
JVM Languages
Apache 2.0
org.jetbrains.kotlin » kotlin-stdlib2 vulnerabilities 1.3.01.9.24
Lang Runtime
Apache 2.0
org.jetbrains.kotlin » kotlin-stdlib-jdk8 1.3.01.9.24
Reflection
Apache 2.0
org.jetbrains.kotlin » kotlin-reflect 1.3.01.9.24
Testing
Apache 2.0
org.jetbrains.kotlin » kotlin-test-junit 1.3.01.9.24
Testing
Apache 2.0
org.jetbrains.kotlin » kotlin-test 1.3.01.9.24
Mocking
MIT
org.mockito » mockito-core 2.28.25.12.0
JVM Languages
MPL 2.0
org.mozilla » rhino 1.7.7.21.7.15
Bytecode
BSD 3-clause
org.ow2.asm » asm 7.3.19.7
Logging
MIT
org.slf4j » slf4j-api 1.7.252.0.13

Apache 2.0
pl.pragmatists » JUnitParams 1.1.1

Developers

NameEmailDev IdRolesOrganization
github contributorsgithubgithub