Code Quality Management Tools

1.Sonar
Sonar (SonarQube) is an open source platform for managing the quality of source code. Sonar is more than a quality data reporting tool, it is a code quality management platform. Supported languages ​​include: Java, PHP, C#, C, Cobol, PL/SQL, Flex, and more.

2. Findbugs
Findbugs is a static analysis tool that examines a class or JAR file and compares the bytecode with a set of defect patterns to find possible problems. Findbugs comes with its own detectors, including more than 60 kinds of Bad practice, more than 80 kinds of Correctness, 1 kind of Internationalization, 12 kinds of Malicious code vulnerability, 27 kinds of Multithreaded correctness, 23 kinds of Performance, and 43 kinds of Dodgy. We can also configure the inspection rules by ourselves (which checks to do, which ones to not do), or we can implement our own unique verification rules (user-defined specific bug modes need to inherit its interface and write their own verification classes, an advanced technique).