JAVA 코드 분석 툴(잠재적 위험도 등)

klocwork

http://www.klocwork.com/

CheckStyle

- a development tool to help programmers write Java code that adheres to a coding standard

- http://checkstyle.sourceforge.net/

FindBugs™

- Find Bugs in Java Programs

- http://findbugs.sourceforge.net/

PMD

- PMD scans Java source code and looks for potential problems like:

1) Possible bugs - empty try/catch/finally/switch statements

2) Dead code - unused local variables, parameters and private methods

3) Suboptimal code - wasteful String/StringBuffer usage

4) Overcomplicated expressions - unnecessary if statements, for loops that could be while loops

5) Duplicate code - copied/pasted code means copied/pasted bugs

- http://pmd.sourceforge.net/

출처 - http://302.pe.kr/295