search

KengoTODA / wish-list

issue list as a public todo list
1 stars 0 forks source link

A modern static analyser for `.class` file #1

Closed KengoTODA closed 4 years ago

KengoTODA commented 9 years ago

FindBugs is a great tool, and its community has many many plugins to detect more problems. But it lacks documentation and multi-thread support.

DataflowAnalysis and OpcodeStackDetector are also need to be improved, Fact becomes Top easily so we cannot make detectors in many cases. Here is an example, that if is necessary when we parse bytecodes after for-loop.

And in huge project, running FindBugs can be very slow, even when we select a few visitors (detectors) to run. It's better to enhance performance, and support incremental-build. If we can scale performance on cluster, it's really good.

Requirements

KengoTODA commented 8 years ago

KengoTODA/findbugs-slf4j#29 has been resolved by changing implementation policy. So this issue can be lower priority.

KengoTODA commented 7 years ago

Now I'm a member of https://github.com/spotbugs ... I'll improve SpotBugs to achieve these goal.

KengoTODA commented 4 years ago

multi-thread support incremental-build support easy to scale on cluster

Now they're supported by Gradle's Build Cache and Incremental Build.

unit-test harness for detectors

https://github.com/spotbugs/spotbugs/tree/master/test-harness

fresh documentation

https://spotbugs.readthedocs.io/en/stable/

support importing detectors from Findbugs

SpotBugs can work with FindBugs detectors.