Top 4 Java Static Code Analysis Tools

Static Code Analysis


Before going over some of top static code analysis tools for Java, lets quickly look at why do we need static code analysis in the first place? Following are some of the reasons:

  1. Rules compliance: Pre-defined rules can be set as per the coding standard and automated static analysis could be run to figure out rules violation. This does cut down on the manual code review for the related rules.
  2. Code quality metrics: The static analysis could be used to measure some of the following based on which software code quality can be measured:
    • Code complexity
    • Unit test coverage
    • Re-usability
    • Duplication
  3. Reports: Creates management reports that can be used to monitor the software code quality trend of various different teams.

If you have been looking for some of the effective static code analysis tool for Java, following are top 5 of them which I found very useful:

  1. PMD: A Java source code analyzer based upon  static rule set that identifies potential problems. It is used to identify possible bugs, and code smells such as duplicate code, dead code, code high cyclomatic complexity etc. One could write custom rules and have it run in the code analysis as well.
  2. CheckStyle: Besides some static code analysis, it can be used to show violations of a configured coding standard. It is a development tool to help programmers write Java code that adheres to a coding standard.
  3. FindBugs: An open-source static bytecode analyzer for Java (based on Jakarta BCEL) from the University of Maryland. FindBugs uses static analysis to identify hundreds of different potential types of errors in Java programs. It is free software, distributed under the terms of the Lesser GNU Public License.
  4. Sonar: Sonar is a static code analysis tool which supports the usage of one of the above as plugin. It analyzes the code, provides data in relation with unit test coverage, code complexity, duplication, documentation, reusability. There are various plugins which can measure software quality metrics.


Ajitesh Kumar
Follow me

Ajitesh Kumar

I have been recently working in the area of Data analytics including Data Science and Machine Learning / Deep Learning. I am also passionate about different technologies including programming languages such as Java/JEE, Javascript, Python, R, Julia, etc, and technologies such as Blockchain, mobile computing, cloud-native technologies, application security, cloud computing platforms, big data, etc. For latest updates and blogs, follow us on Twitter. I would love to connect with you on Linkedin. Check out my latest book titled as First Principles Thinking: Building winning products using first principles thinking. Check out my other blog,
Posted in Software Quality. Tagged with , .

One Response

Leave a Reply

Your email address will not be published. Required fields are marked *