Wednesday, August 31, 2011

Java Code Quality Tools - Overview

Recently, I had a chance to present the subject at the local IT community meetup. Here is the basic presentation:
and more meaningful mind map:
But, I think I need to cover this subject more deeply. This blog post should be something like start point for further investigation in this direction.

1. CodePro Analytix
It's a great tool (Eclipse plugin) for improving software quality. It has the next key features: Code Analysis, JUnit Test Generation, JUnit Test Editor, Similar Code Analysis, Metrics, Code Coverage and Dependency Analysis.
2. PMD
It scans Java source code and looks for potential problems: Possible bugs, Dead code, Suboptimal code, Overcomplicated expressions and Duplicate code.
3. FindBugs
It looks for bugs in Java programs. It can detect a variety of common coding mistakes, including thread synchronization problems, misuse of API methods, etc.
4.  Cobertura
It's a free Java tool that calculates the percentage of code accessed by tests. It can be used to identify which parts of your Java program are lacking test coverage. It is based on jcoverage.
5. Emma
It is a fast Java code coverage tool based on bytecode instrumentation. It differs from the existing tools by enabling coverage profiling on large scale enterprise software projects with simultaneous emphasis on fast individual development.
6.  Checkstyle
It is a development tool to help programmers write Java code that adheres to a coding standard.
7. JBoss Tattletale
JBoss Tattletale is a tool that can help you get an overview of the project you are working on or a product that you depend on. The tool will recursive scan a directory for JAR files and generate linked and formatted HTML reports.
8. UCDetector
UCDetector (Unecessary Code Detector) is a Open Source eclipse PlugIn Tool to find unecessary (dead) java code. It also tries to make code final, protected or private. UCDetector also finds cyclic dependencies between classes.
9. Sonar
Sonar is a continuous quality control tool for Java applications. Its basic purpose in life is to join your existing continuous integration tools to place all your development projects under quality control.
10. XRadar
The XRadar is an open extensible code report tool that produces HTML/SVG reports of the systems current state and the development over time. Uses DependencyFinder, JDepend, PMD, PMD-CPD, JavaNCSS, Cobertura, Checkstyle, XSource, JUnit, Java2HTML, ant and maven.
11. QALab
QALab consolidates data from Checkstyle, PMD, FindBugs and Simian and displays it in one consolidated view. QALab keeps a track of the changes over time, thereby allowing you to see trends over time. You can tell weather the number of violations has increased or decreased - on a per file basis, or for the entire project. It also plots charts of this data. QALab plugs in to maven or ant.
12. Clirr
Clirr is a tool that checks Java libraries for binary and source compatibility with older releases. Basically you give it two sets of jar files and Clirr dumps out a list of changes in the public api. The Clirr Ant task can be configured to break the build if it detects incompatible api changes. In a continuous integration process Clirr can automatically prevent accidental introduction of binary or source compatibility problems.
13. JDiff
JDiff is a Javadoc doclet which generates an HTML report of all the packages, classes, constructors, methods, and fields which have been removed, added or changed in any way, including their documentation, when two APIs are compared. This is very useful for describing exactly what has changed between two releases of a product. Only the API (Application Programming Interface) of each version is compared. It does not compare what the source code does when executed.
14. JLint
It checks your Java code and find bugs, inconsistencies and synchronization problems by doing data flow analysis and building the lock graph.
15. JDepend
JDepend traverses Java class file directories and generates design quality metrics for each Java package. JDepend allows you to automatically measure the quality of a design in terms of its extensibility, reusability, and maintainability to effectively manage and control package dependencies.
16. cloc
cloc counts blank lines, comment lines, and physical lines of source code in many programming languages.
17. Dependometer
Dependometer performs a static analysis of physical dependencies within a software system. Dependometer validates dependencies against the logical architecture structuring the system into classes, packages, subsystems, vertical slices and layers and detects cycles between these structural elements. Furthermore, it calculates a number of quality metrics on the different abstraction layers and reports any violations against the configured thresholds.
18. Hammurapi
Hammurapi is an open source code inspection tool. Its release comes with more than 100 inspectors which inspect different aspects of code: Compliance with EJB specification, threading issues, coding standards, and much more.
19. JavaNCSS
JavaNCSS is a simple command line utility which measures two standard source code metrics for the Java programming language. The metrics are collected globally, for each class and/or for each function.
20. DCD
DCD finds dead code in your Java applications.
21. Classycle
Classycle's Analyser analyses the static class and package dependencies in Java applications or libraries. It is especially helpful for finding cyclic dependencies between classes or packages. Classycle is similar to JDepend which does also a dependency analysis but only on the package level.
22. ckjm
The program ckjm calculates Chidamber and Kemerer object-oriented metrics by processing the bytecode of compiled Java files. The program calculates for each class the following six metrics proposed by Chidamber and Kemerer.
23. Jameleon
Jameleon is an automated testing framework that can be easily used by technical and non-technical users alike. One of the main concepts behind Jameleon is to create a group of keywords or tags that represent different screens of an application. All of the logic required to automate each particular screen can be defined in Java and mapped to these keywords. The keywords can then be organized with different data sets to form test scripts without requiring an in-depth knowledge of how the application works. The test scripts are then used to automate testing and to generate manual test case documentation.
24. DoctorJ
DoctorJ analyzes Java code, in the following functional areas: documentation verification, statistics generation and syntax analysis.
25. Macker
Macker is a build-time architectural rule checking utility for Java developers. It's meant to model the architectural ideals programmers always dream up for their projects, and then break -- it helps keep code clean and consistent. You can tailor a rules file to suit a specific project's structure, or write some general "good practice" rules for your code. Macker doesn't try to shove anybody else's rules down your throat; it's flexible, and writing a rules file is part of the development process for each unique project.
26. Squale
Squale is a qualimetry platform that allows to analyze multi-language software applications in order to give a sharp and comprehensive picture of their quality: High level factors for top-managers and Practical indicators for development teams.
27. SourceMonitor
The freeware program SourceMonitor lets you see inside your software source code to find out how much code you have and to identify the relative complexity of your modules. For example, you can use SourceMonitor to identify the code that is most likely to contain defects and thus warrants formal review.
28. Panopticon
The Panopticode project provides a set of open source tools for gathering, correlating, and displaying code metrics.
29. Eclipse Metrics plugin


Provide metrics calculation and dependency analyzer plugin for the Eclipse platform. Measure various metrics with average and standard deviation and detect cycles in package and type dependencies and graph them.
30. QJ-Pro
QJ-Pro is a comprehensive software inspection tool targeted towards the software developer. Developers can automatically inspect their Java source code and improve their Java programming skills as they write their programs. QJ-Pro provides descriptive Java patterns explaining error prone code constructs and providing solutions for it.
31. Byecycle
Byecycle is an auto-arranging dependency analysis plugin for Eclipse. Its goal is to make you feel sick when you see bad code and to make you feel happy when you see good code.
32. Coqua
Coqua measures 5 distinct Java code quality metrics, providing an overview and history for the management, and down-to-the-code, detailed views for the developer. Metrics can be defined per team. Ideal for mid- to large-sized and/or offshore projects.
33. Dependency Finder
Extracts dependencies and OO metrics from Java class files produced by most Java compilers.
34. Jalopy
Jalopy is an easily configurable source code formatter that can detect, and fix, a number of code convention flaws that might appear in Java code. Jalopy is more of a code fixer than a code checker. Jalopy plug-ins are present for most IDEs and, in most cases, they gel quite seamlessly with the IDE.
35. JarAnalyzer
JarAnalyzer is a dependency management tool for .jar files. JarAnalyzer will analyze all .jar in a given directory and identify the dependencies between each. Output formats include xml, with a stylesheet included to transform it to html, and GraphViz DOT, allowing you to produce a visual component diagram showing the relationships between .jar files. The xml output includes important design metrics such as Afferent and Efferent coupling, Abstractness, Instability, and Distance. There is also an Ant task available that allows you to include JarAnalyzer as part of your build script.
36. Condenser
Condenser is a tool for finding and removing duplicated Java code. Unlike tools that only locate duplicated code, the aim of Condenser is to also automatically remove duplicated code where it is safe to do so.
37. Relief
Relief provides a new look on Java projects. Relying on our ability to deal with real objects by examining their shape, size or relative place in space it gives a "physical" view on java packages, types and fields and their relationships, making them easier to handle. Lets discuss quickly how we interprete physical properties and how it can help us to grasp project characteristics.
38. JCSC
JCSC is a powerful tool to check source code against a highly definable coding standard and potential bad code. The standard covers naming conventions for class, interfaces, fields, parameter, ... . Also the structural layout of the type (class/interface) can be defined. Like where to place fields, either before or after the methods and in which order. The order can be defined through the visibility or by type (instance, class, constant). The same is applicable for methods. Each of those rules is highly customizable. Readability is enhanced by defining where to put white spaces in the code and when to use braces. The existence of correct JavaDoc can be enforced and various levels. Apart from that, it finds weaknesses in the the code -- potential bugs -- like empty catch/finally block, switch without default, throwing of type 'Exception', slow code.
39. Spoon
Spoon is a Java program processor that fully supports Java 5. It provides a complete and fine-grained Java metamodel where any program element (classes, methods, fields, statements, expressions...) can be accessed both for reading and modification. Spoon can be used on validation purpose, to ensure that your programs respect some programming conventions or guidelines, or for program transformation, by using a pure-Java template engine.
40. Lint4j
Lint4j ("Lint for Java") is a static Java source and byte code analyzer that detects locking and threading issues, performance and scalability problems, and checks complex contracts such as Java serialization by performing type, data flow, and lock graph analysis.
41. Crap4j 
Crap4j is a Java implementation of the CRAP (Change Risk Analysis and Predictions) software metric – a mildly offensive metric name to help protect you from truly offensive code.
42. PathFinder
Java PathFinder (JPF) is a system to verify executable Java bytecode programs. In its basic form, it is a Java Virtual Machine (JVM) that is used as an explicit state software model checker, systematically exploring all potential execution paths of a program to find violations of properties like deadlocks or unhandled exceptions. Unlike traditional debuggers, JPF reports the entire execution path that leads to a defect. JPF is especially well-suited to finding hard-to-test concurrency defects in multithreaded program
43. Soot
Soot can be used as a stand alone tool to optimize or inspect class files, as well as a framework to develop optimizations or transformations on Java bytecode.
44. ESC/Java2
The Extended Static Checker for Java version 2 (ESC/Java2) is a programming tool that attempts to find common run-time errors in JML-annotated Java programs by static analysis of the program code and its formal annotations. Users can control the amount and kinds of checking that ESC/Java2 performs by annotating their programs with specially formatted comments called pragmas.
45.CODERU
CODERU is a java code quality tool to enforce good design in respect to package dependencies. The CODERU-rules rely on reserved package names and the allowed dependency rules between them expressed in a general way.




 * * *










This list includes open sourced and free tools. I intentionally have excluded commercial tools. I'm sure there are much more tools. In case your know some of them which isn't listed here please add comment to this post.

21 comments:

  1. tnx very useful stuff... :))) -jsonmanz

    ReplyDelete
  2. There is a new tool called CODERU that deserves to be taken on your list.

    ReplyDelete
    Replies
    1. Tnx for sharing. I've added this tool to the list.

      Delete
  3. Hello there, You have done a fantastic job.
    I will definitely digg it and personally suggest to my friends.

    I'm confident they will be benefited from this web site.

    my blog post: alternative investment association

    ReplyDelete
  4. Hello, after reading this remarkable article i am as well delighted to share my experience here with colleagues.


    Also visit my homepage wordpress theme free

    ReplyDelete
  5. Definitely believe that that you said. Your favorite reason seemed
    to be at the internet the easiest factor to understand
    of. I say to you, I certainly get annoyed at the same
    time as other people consider issues that they just do not recognise about.

    You managed to hit the nail upon the top and defined out the entire thing without having side effect , people could take a signal.
    Will likely be back to get more. Thanks

    Here is my weblog ... low carb weight loss
    Also see my webpage > low carb lebensmittelliste

    ReplyDelete
  6. My brother suggested I might like this website.
    He was entirely right. This post actually made my day.
    You can not imagine simply how much time I had spent for this info!
    Thanks!

    Have a look at my weblog paleo ernährung rezepte

    ReplyDelete
  7. My brother suggested I might like this website. He was entirely right.
    This post actually made my day. You can not imagine simply how much
    time I had spent for this info! Thanks!

    Here is my web blog ... paleo ernährung rezepte
    Also see my site: paleo diät erfahrung

    ReplyDelete
  8. Nice post. I used to be checking continuously this blog and
    I'm impressed! Very useful info specifically the ultimate part :) I maintain such info much. I was looking for this particular info for a very long time. Thanks and best of luck.

    my web page; paläo diät

    ReplyDelete
  9. Just desire to say your article is as surprising.
    The clearness on your post is simply nice and i could suppose
    you're a professional on this subject. Fine together with your permission allow me to grasp your feed to keep updated with forthcoming post. Thanks one million and please carry on the rewarding work.

    Feel free to surf to my web-site ... wordpress log in
    my web site - wordpress tutorials

    ReplyDelete
  10. Pretty great post. I simply stumbled upon your weblog and wanted to say that I've truly enjoyed browsing your blog posts. In any case I'll be subscribing
    on your feed and I am hoping you write again soon!


    Also visit my web blog: diets to lose weight

    ReplyDelete
  11. Wгite morе, thаts all I havе to saу.
    Literally, it seems as thоugh you rеlied on the vіdeo to make youг poіnt.
    Yοu dеfinіtеly knoω what youre tаlking about, ωhy wаѕte your intеlligence
    on just ρoѕtіng videοѕ to yοur sіtе whеn you could be gіving us
    ѕomethіng informаtіve tο read?


    Feеl fгee to surf to my ωеb ѕite - raspberry ketone

    ReplyDelete
  12. Good post. I learn something new and challenging on
    sites I stumbleupon on a daily basis. It's always useful to read articles from other writers and use a little something from other web sites.

    Feel free to surf to my weblog :: puregreencoffeediet.webs.com

    ReplyDelete
  13. Hi, i think that i saw you visited my web site
    so i came to “return the favor”.I am attempting to find things to
    enhance my web site!I suppose its ok to use a few of your ideas!
    !

    Stop by my web blog: www.slotschief.com

    ReplyDelete
  14. Howdy! I know this is somewhat off topic but I was wondering if you knew where I
    could get a captcha plugin for my comment form? I'm using the same blog platform as yours and I'm having
    difficulty finding one? Thanks a lot!

    Here is my web blog: www.nodepositcasinobonuses.net

    ReplyDelete
  15. I encountered this site through http://halyph.

    blogspot.com/ and if I may I want to point out to you some useful things or ideas.
    Perhaps you can write your next articles relating to
    these ideas. I want to read more things concerning
    what you're talking about.

    Also visit my homepage :: Erwartungen

    ReplyDelete
  16. Hey theгe superb blog! Does гunning a blog ѕimilar to thiѕ take a
    masѕіvе amοunt work? Ι have absolutelу no underѕtandіng of ρrogramming however I was hoρing to start my own blog in the near future.
    Αnyways, ѕhould you have any suggestionѕ oг techniquеs fоr new blog oωnеrs plеаsе shaгe.

    I understand thіs iѕ off subjeсt hοweνeг I simply nеedеԁ to
    asκ. Thanks!

    Here is my ωeb page: vitamin shoppe coupon code $10 off

    ReplyDelete
  17. What's up, its good post concerning media print, we all know media is a enormous source of data.

    Look into my website - vistaprint coupon code

    ReplyDelete
  18. Wonderful work! This is the kind of information that should be shared around the net.

    Shame on the seek engines for not positioning this publish higher!
    Come on over and consult with my website . Thanks =) http://www.restaurantebertorellis.es/wilmer-2
    - ageless male - ageless male

    Also visit my web blog talesfromasextoylady.com

    ReplyDelete
  19. Just wish to say your article is as аmazіng.
    Thе clarity in your post is just spectaсulаr
    and i could asѕume you're an expert on this subject. Well with your permission allow me to grab your feed to keep updated with forthcoming post. Thanks a million and please continue the rewarding work.

    Here is my webpage - raspberry ketone

    ReplyDelete
  20. You forgot the only valid measurement of code quality. The number of tears from code that made me cry: http://www.ctmmc.net

    ReplyDelete