What code analysis tools do you use on your Java projects? I am interested in all kinds static code analysis tools (FindBugs, PMD, and any others) code coverage tools (Cobertura, Emma, and any others) any other instrumentation-based tools anything else, if I'm missing something If applicable, also state what build tools you use and...
I'm working on an app that converts source code from using one framework to another. I really wanted to make the agonizing monotonous job automatic. After looking a lot for something that code help me treat source code in an object-oriented way and modify it the closest thing I've found was JaxMeJS and that's short of what I need too. I...
What are some of the strategies that are used when implementing FxCop / static analysis on existing code bases with existing violations? How can one most effectively reduce the static analysis violations? ...
I am starting to use Python (specifically because of Django) and I would like to remove the burden for exhaustive testing by performing some static analysis. What tools/parameters/etc. exist to detect issues at compile time that would otherwise show up during runtime? (type errors are probably the most obvious case of this, but undefine...
What tools are there available for static analysis against C# code? I know about FxCop and StyleCop. Are there others? I've run across NStatic before but it's been in development for what seems like forever - it's looking pretty slick from what little I've seen of it, so it would be nice if it would ever see the light of day. Along the...
I recently downloaded ndepend and ran an analysis on an open source project I participate in. I did not now where to look next - a bit of visual and information overload and it turned out I don't even know where to start. Can anyone suggest starting points? What information should I look for first? What points out problems in the cod...
There are many options for static analysis, and it's a hot topic, so: What is static analysis? When should you use it, and when shouldn't it be used? What are potential gotchas regarding proper and improper usage/application of static analysis? Any languages that don't have a good static analysis tool, and what do you do when you don...
I've seen there are some race condition analysis tools for C++, C and Java. Anyone know of any static analysis tools that do the same for .NET? ...
How are folks integrating various static analysis tools such as PMD, Checkstyle, and FindBugs so that they are used together in some uniform way? In particular, I'm interested in generating a single uniform report that includes warnings from all tools. Also, I want to be able to mark-up my code with reasonably consistent looking warning ...
I'm trying to understand why some Java projects do not use static analysis tools like PMD, FindBugs, and Checkstyle. Lack of support from the powers-that-be in your organization? Perceived lack of value in the feedback provided by these tools? (signal-to-noise ratio too low? too many false positives?) Lack of time to configure and ...
Does there exist a project or product that implements static analysis rules specifically designed to enforce the advice given in "Effective Java," 2nd ed., Bloch? Many people agree that "Effective Java" is a very good book. The ability to scan code for opportunities to apply the "Effective Java" advice would most likely be seen as valua...
Javascript code can be tough to maintain. I am looking for tools that will help me ensure a reasonable quality level. So far I have found JsUNit, a very nice unit test framework for javascript. Tests can be run automatically from ant on any browser available. I have not found yet some javascript equivalent of PMD, checkstyle, Findbug... ...
What C++ static code analysis tool are there on Microsoft Windows, and which would you recommend? Please state whether a particular tool relies on cygwin, and whether it cost money. One per post as per for voting up & down. Similar Question: http://stackoverflow.com/questions/141498/what-open-source-c-static-analysis-tools-are-availabl...
Being vaguely familiar with the Java world I was googling for a static analysis tool that would also was intelligent enough to fix the issues it finds. I ran at CodePro tool but, again, I'm new to the Java community and don't know the vendors. What tool can you recommend based on the criteria above? Thank you! ...
What tools are good to use for code analysis in python? I have a large source repository split across multiple projects, and I would like to be able to run tools across the directories to see details like Cyclomatic Complexity, and perhaps be able to spot errors using static analysis. Ideally, I would like to be able to produce a repor...
Is there a setting in Resharper 4 (or even Visual Studio itself...) that forces a warning if I forget to wrap code in a using block, or ommit the proper Dispose call in a finally block? ...
We want to invite a third party for reviewing our code and they want to know a ball park figure of number of lines of code we have in all our applications! Depending on the coding style of each of developer and depending on the language chosen there can be significant difference by measuring the LOC. I am really interested in knowing, h...
I would very much like to integrate pylint into the build process for my python projects, but I have run into one show-stopper: One of the error types that I find extremely useful--:E1101: *%s %r has no %r member*--constantly reports errors when using common django fields, for example: E1101:125:get_user_tags: Class 'Tag' has no 'objec...
While I certainly understand the purpose of buffer annotations, I can't see what kind of errors __callback detects. Any ideas, examples? ...
Is there any tool out there that can identify name spaces in the Using statement that are not needed and eliminate them from the source? ...