1.pmd / pmdAn extensible multilanguage static code analyzer.code-analysiscode-qualitystatic-analysisstatic-code-analysislinterjava+4 moreJavaOther license5.5K total1.6K forks+5 starsfrom 5,518 · score 1.79
2.javaparser / javaparserJava 1-25 Parser and Abstract Syntax Tree for Java with advanced analysis functionalities.javaparserparserjavajavadoccode-generationcode-generator+5 moreJavaOther license6.2K total1.3K forks+4 starsfrom 6,168 · score 1.61
3.spotbugs / spotbugsSpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code.findbugsstatic-analysiscode-analysisstatic-code-analysislinterhacktoberfestJavaLGPL-2.14K total692 forks+2 starsfrom 3,963 · score 1.10
4.find-sec-bugs / find-sec-bugsThe SpotBugs plugin for security audits of Java web applications and Android applications. (Also work with Kotlin, Groovy and Scala projects)findbugsjavasecurity-auditowasptaint-analysiscode-analysis+5 moreJavaLGPL-3.02.5K total486 forks+1 starsfrom 2,452 · score 0.69