FindBugs is a program that uses static analysis to look for bugs in Java code. It can detect a variety of common coding mistakes, including thread synchronization problems, misuse of API methods.
Compile Dependencies (4)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Code Analyzer
LGPL 2.1
|  | com.google.code.findbugs
»
findbugs SpotBugs: Because it is easy! | 3.0.1 | 4.9.8 |
Defect Detection
LGPL 2.1
| | com.google.code.findbugs
»
annotations Annotations the SpotBugs tool supports | 2.0.1 | 4.9.8 |
XML Processing
BSD 3-clause
|  | com.thoughtworks.xstream
»
xstream36 vulnerabilities XStream is a simple and fast library to serialize objects to XML and back again with a low memory footprint. | 1.3.1 | 1.4.21 |
LGPL 3.0
|  | org.codehaus.sonar.sslr-squid-bridge » sslr-squid-bridge | 2.5.3 | 2.7.1.392 |
Provided Dependencies (5)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
LGPL
|  | com.h3xstream.findsecbugs
»
findsecbugs-plugin Core module of the project. It include all the SpotBugs detectors. | 1.3.0 | 1.14.0 |
LGPL
|  | com.mebigfatguy.fb-contrib
»
fb-contrib An auxiliary findbugs.sourceforge.net plugin for java bug detectors that fall outside the narrow scope of detectors to ... | 6.0.0 | 7.7.4 |
Build Tool
Apache 2.0
|  | org.apache.maven
»
maven-project Core classes of Apache Maven to manage the building process. | 2.0.7 | 3.9.15 |
LGPL 3.0
| | org.codehaus.sonar
»
sonar-plugin-api Open source platform for continuous inspection of code quality | 4.5.2 | 9.4.0.54424 |
| org.codehaus.sonar-plugins.java
»
sonar-java-plugin Code Analyzer for Java | 2.7 | 8.29.0.43460 |
Test Dependencies (7)
| Category/License | Group / Artifact | Version | Updates | |
|---|---|---|---|---|
Testing
EPL 2.0
|  | junit
»
junit1 vulnerability JUnit Jupiter is the API for writing tests using JUnit 5. | 4.11 | 6.0.3 |
Testing
LGPL 3.0
| | org.codehaus.sonar
»
sonar-testing-harness Open source platform for continuous inspection of code quality | 4.5.2 | 26.5.0.122743 |
LGPL 3.0
| | org.codehaus.sonar
»
sonar-plugin-api Open source platform for continuous inspection of code quality | 4.5.2 | 9.4.0.54424 |
Testing
Apache 2.0
|  | org.easytesting
»
fest-assert 'Flexible' or 'fluent' assertions for testing | 1.4 | 2.0M10 |
Mocking
MIT
|  | org.mockito
»
mockito-all Mockito mock objects library core API and implementation | 1.9.0 | 5.23.0 |
Logging Bridge
MIT
|  | org.slf4j
»
slf4j-log4j12 SLF4J Reload4j Provider | 1.5.2 | 2.0.17 |
Testing
BSD 3-clause
|  | xmlunit
»
xmlunit XMLUnit 1.x Compatibility Layer | 1.6 | 2.11.0 |
