PoC: SpotBugs seems to be the successor of FindBugs

SAP / fosstars-rating-core

A framework for defining ratings for open source projects. In particular, the framework offers a security rating for open source projects that may be used to assess the security risk that comes with open source components.

https://sap.github.io/fosstars-rating-core/

Apache License 2.0

60 stars 28 forks source link

PoC: SpotBugs seems to be the successor of FindBugs #727

Open sourabhsparkala opened 3 years ago

sourabhsparkala commented 3 years ago

Find if SpotBugs can contribute to Security Score?
PoC identify ways to integrate it into the core

Ref: https://github.com/spotbugs/spotbugs

sourabhsparkala commented 3 years ago

Hint: Maven and Gradle will have SpotBugs plugin.