spotbugs/spotbugs
SpotBugs is FindBugs' successor. A tool for static analysis to look for bugs in Java code. observed · 2026-08-28
Health v2 · maintenance only
99/100
- Activity 99
- Release rhythm 98
- Longevity 100
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-03. Adoption (stars, forks) is never an input.
- gap_med: 24
- age_days: 3589
- days_rel: 13
- days_push: 8
- n_releases_24m: 14
Adoption not part of the score
3925 stars · 675 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded
SpotBugs is a static analysis tool that finds bugs in Java bytecode, serving as the community-maintained successor to the abandoned FindBugs project. It detects over 400 bug patterns and integrates with build tools and IDEs like Maven, Gradle, Eclipse, and IntelliJ IDEA.
Use cases
- find bugs in java code with static analysis
- replace findbugs since it is abandoned
- run static code analysis in gradle build
- detect null pointer dereferences and bad practices in java
- scan java project for security vulnerabilities with find-sec-bugs
- integrate bug detection into maven or ant builds
- check java code quality in CI pipeline
When to choose
- you maintain a Java or JVM-language codebase and want automated bug detection
- you need a maintained replacement for FindBugs
- you want static analysis integrated into Maven, Gradle, Ant, or your IDE
- you need extensible bug detectors via plugins like fb-contrib or find-sec-bugs
When to avoid
- your project is not on the JVM (it analyzes Java bytecode only)
- you need dynamic analysis, runtime profiling, or test coverage rather than static checks
- you want a full SonarQube-style quality platform rather than a focused bug finder
Facets
cli-tool · maturity active
linter security code-review developer-tools developer-tools testing security jvm cross-platform cli static-analysis findbugs-successor java bug-detection gradle-plugin maven-plugin eclipse-plugin
2 sources
- readme: https://github.com/spotbugs/spotbugs · fetched 2026-08-28 · e07826324b22
- homepage: https://spotbugs.github.io/ · fetched 2026-08-29 · 53356d2b92b5
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| spotbugs/spotbugs | main | 99 |
For agents
markdown · JSON · MCP: product_card(name="spotbugs/spotbugs")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem