Static analysis tool for Java that catches common programming mistakes at compile-time
Compile Dependencies (13)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Annotation Lib
Apache 2.0
|  | com.github.stephenc.jcip
»
jcip-annotations A clean room implementation of the JCIP Annotations based entirely on the specification provided by the javadocs. | 1.0-1 | ✔ |
Annotation Tool
Apache 2.0
| | com.google.auto
»
auto-common Common utilities for creating annotation processors. | 0.10 | 1.2.2 |
LGPL
|  | com.google.code.findbugs
»
jFormatString jFormatString for Findbugs | 3.0.0 | ✔ |
Code Analyzer
LGPL 2.1
| | com.google.code.findbugs
»
jsr305 Annotations the SpotBugs tool supports | 3.0.0 | 4.9.8 |
Apache 2.0
| | com.google.errorprone » error_prone_annotation | 2.3.2 | 2.49.0 |
Apache 2.0
| | com.google.errorprone
»
error_prone_type_annotations Annotations for Error Prone, a static analysis tool for Java that catches common programming mistakes at compile-time. | 2.3.2 | 2.49.0 |
Apache 2.0
| | com.google.errorprone » error_prone_check_api | 2.3.2 | 2.49.0 |
GPL 2.0
| | com.google.errorprone
»
javac A repackaged copy of javac | 9+181-r4173-1 | ✔ |
Defect Detection
Apache 2.0
| | com.google.errorprone
»
error_prone_annotations Annotations for Error Prone, a static analysis tool for Java that catches common programming mistakes at compile-time. | 2.3.2 | 2.49.0 |
Core Utils
Apache 2.0
| | com.google.guava
»
guava3 vulnerabilities Guava is a suite of core and expanded libraries that include | 23.5-jre | 33.6.0-jre |
Data Format
BSD 3-clause
| | com.google.protobuf
»
protobuf-java6 vulnerabilities Core Protocol Buffers library. Protocol Buffers are a way of encoding structured data in an | 3.4.0 | 4.34.1 |
GPL
|  | org.checkerframework
»
dataflow Dataflow is a dataflow framework based on the javac compiler. | 2.5.3 | 4.1.0 |
Collections
MIT
|  | org.pcollections
»
pcollections A Persistent Java Collections Library | 2.1.2 | 5.0.0 |
Provided Dependencies (2)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Config
Apache 2.0
| | com.google.auto.service
»
auto-service Provider-configuration files for ServiceLoader. | 1.0-rc4 | 1.1.1 |
CodeGen
Apache 2.0
| | com.google.auto.value
»
auto-value Immutable value-type code generation for Java 8+. | 1.5.3 | 1.11.1 |
Test Dependencies (25)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Apache 2.0
| | com.google.auto.factory
»
auto-factory JSR-330-compatible factories. | 1.0-beta5 | 1.1.0 |
Apache 2.0
| | com.google.common.html.types
»
proto A protocol buffer that defines wrappers for strings in web-content | 1.0.0 | 1.0.8 |
Apache 2.0
| | com.google.common.html.types
»
types Wrapper types for web content strings. | 1.0.5 | 1.0.8 |
Dep Injection
Apache 2.0
| | com.google.dagger
»
dagger A fast dependency injector for Android and Java. | 2.14.1 | 2.59.2 |
Apache 2.0
| | com.google.dagger
»
dagger-producers A fast dependency injector for Android and Java. | 2.14.1 | 2.59.2 |
Apache 2.0
| | com.google.errorprone » error_prone_test_helpers | 2.3.2 | 2.49.0 |
Testing
Apache 2.0
| | com.google.guava
»
guava-testlib Guava testlib is a set of java classes used for more convenient | 23.5-jre | 33.6.0-jre |
Dep Injection
Apache 2.0
|  | com.google.gwt.inject
»
gin GIN (GWT INjection) brings automatic dependency injection to Google Web Toolkit client-side code. GIN is built on top of ... | 2.1.2 | ✔ |
Dep Injection
Apache 2.0
| | com.google.inject
»
guice Guice is a lightweight dependency injection framework for Java 8 and above, developed by Google. | 4.0-beta5 | 7.0.0 |
Apache 2.0
| | com.google.inject.extensions » guice-assistedinject | 4.0-beta5 | 7.0.0 |
Apache 2.0
| | com.google.inject.extensions » guice-servlet | 4.0-beta5 | 7.0.0 |
Apache 2.0
| | com.google.inject.extensions » guice-testlib | 4.0 | 7.0.0 |
Testing
Apache 2.0
| | com.google.testing.compile
»
compile-testing Utilities for testing compilation. | 0.15 | 0.23.0 |
Assertion
Apache 2.0
| | com.google.truth
»
truth Fluent assertions for Java and Android that makes your test assertions and failure messages more readable. | 0.36 | 1.4.5 |
Apache 2.0
| | com.google.truth.extensions
»
truth-java8-extension Obsolete, empty artifact that merely pulls in the main `truth` artifact: Assertions for Java 8 types are now part of ... | 0.36 | 1.4.5 |
 | com.ibm.icu
»
icu4j International Components for Unicode for Java (ICU4J) is a mature, widely used Java library | 56.1 | 78.3 | |
Network Framework
Apache 2.0
|  | io.netty
»
netty-all1 vulnerability Netty is a NIO client server framework which enables quick and easy development of network applications such as protocol ... | 4.1.12.Final | 4.2.13.Final |
Date/Time
Apache 2.0
|  | joda-time
»
joda-time Joda-Time provides a quality replacement for the Java date and time classes. Note that from Java SE 8 onwards, users ... | 2.9.4 | 2.14.2 |
Testing
EPL 2.0
|  | junit
»
junit1 vulnerability JUnit Jupiter is the API for writing tests using JUnit 5. | 4.13-SNAPSHOT | 6.0.3 |
Assertion
Apache 2.0
|  | org.assertj
»
assertj-core1 vulnerability Rich and fluent assertions for testing in Java | 3.9.0 | 3.27.7 |
Testing
BSD 3-clause
|  | org.hamcrest
»
hamcrest-core Core API and libraries of hamcrest matcher framework. | 1.3 | 3.0 |
Testing
BSD 3-clause
| | org.hamcrest
»
hamcrest-library Core API and libraries of hamcrest matcher framework. | 1.3 | 3.0 |
Mocking
BSD
|  | org.jmock
»
jmock JMock is a testing framework for Java that allows you to create mock objects. | 2.8.0 | 2.13.1 |
Mocking
BSD
| | org.jmock » jmock-junit4 | 2.8.0 | 2.13.1 |
Mocking
MIT
|  | org.mockito
»
mockito-core Mockito mock objects library core API and implementation | 2.0.3-beta | 5.23.0 |
