The APIs that might be of interest to developers of Java applications that need to perform source code analysis are the Java Compiler API (JSR 199), the Pluggable Annotation Processing API ...

Brian Chess, chief scientist at Fortify Software, whose analyzer specializes in detection of security vulnerabilities in C, C++, Java, JSP, and PL/SQL source code, thinks security concerns make ...

Klocwork will be showcasing it's latest source-code-analysis capabilities at ESC 2008. Read Embedded Editor William Wong's writeup of the company's lineup.

A Java code quality tool that performs code coverage tests. It also reports on the cyclomatic complexity of code, an indicator that code will be difficult to troubleshoot and maintain. SonarQube: An ...

It's always a good idea to employ a few static code analysis tools as part of your software development routine. There are a number of great tools that perform static analysis of Java code, such as ...