SpotBugs

Static analysis tool that finds bugs in Java code using 400+ bug patterns. Runs on JRE 11+ and analyzes programs compiled for any Java version. Integrations for Ant, Maven, Gradle, and Eclipse; extensible via plugins (e.g. fb-contrib, find-sec-bugs).