PMD source code analyzer

#1

Post by BuuQu9hu » Tue, Jan 10, 2017, 3:15 AM UTC

Re: PMD source code analyzer

#2

Post by caseysoftware » Tue, Jan 10, 2017, 5:31 AM UTC

Wow, crazy to see this project still alive and thriving. I was using it 10+ years ago when I worked exclusively in Java. It was great to find those "obvious" issues that slip in that you didn't notice when you should of. I think I had it as a SVN pre-commit hook at one point.

In fact, the lead dev wrote a book "PMD Applied" and I wrote a review of it: http://caseysoftware.com/blog/book-review-pmd-applied

It's since been implemented in PHP too: https://phpmd.org/

Re: PMD source code analyzer

#3

Post by bastijn » Tue, Jan 10, 2017, 5:48 AM UTC

Since it is not on the front page and probably everybody wants to know. Here is what it claims to do.

"PMD scans source code in Java and other languages and looks for potential problems like:

- Possible bugs - empty try/catch/finally/switch statements

- Dead code - unused local variables, parameters and private methods

- Suboptimal code - wasteful String/StringBuffer usage Overcomplicated expressions - unnecessary if statements, for loops that could be while loops

- Duplicate code - copied/pasted code means copied/pasted bugs"

[0] http://pmd.sourceforge.net/snapshot/

Re: PMD source code analyzer

#4

Post by rickette » Tue, Jan 10, 2017, 5:58 AM UTC

I'm not sure why this is on the frontpage since PMD (like Checkstyle and FindBugs) has been around for years. Still If your not familiar with PMD you should take a look. Anyway these days you probably want to invest in setting up SonarQube which is a superior tool in many ways (multi-language code analysis with webbassd dashboard etc)

Re: PMD source code analyzer

#5

Post by Ace17 » Tue, Jan 10, 2017, 6:12 AM UTC

Some usage examples on the front page would have been nice.

Re: PMD source code analyzer

#6

Post by xvilka » Tue, Jan 10, 2017, 6:52 AM UTC

I wonder how it's comparable with Infer [1].

1. https://github.com/facebook/infer

Re: PMD source code analyzer

#7

Post by mmrezaie » Tue, Jan 10, 2017, 10:01 AM UTC

I rarely write a bad code, just joking! But has anyone used the emacs plug-in for it? And is it any good?

Re: PMD source code analyzer

#8

Post by underyx » Tue, Jan 10, 2017, 10:16 AM UTC

Here's a shameless plug for https://coala.io/ which is a sort of a meta-linter — coala can run PMD on your code along with ~100 other linters and code checkers.

Re: PMD source code analyzer

#9

Post by thecupisblue » Tue, Jan 10, 2017, 10:56 AM UTC

underyx wrote: post #8

Here's a shameless plug for https://coala.io/ which is a sort of a meta-linter — coala can run PMD on your code along with ~100 other linters and code checkers.

Oh wow! Awesome, gonna try it out today on my Android project, didn't know it existed!

Re: PMD source code analyzer

#10

Post by blater » Tue, Jan 10, 2017, 12:56 PM UTC

caseysoftware wrote: post #2

Wow, crazy to see this project still alive and thriving. I was using it 10+ years ago when I worked exclusively in Java. It was great to find those "obvious" issues that slip in that you didn't notice when you should of. I think I had it as a SVN pre-commit hook at one point. In fact, the lead dev wrote a book "PMD Applied" and I wrote a review of it: http://caseysoftware.com/blog/book-review-pmd-applied It's since b…

yeah, nice to see PMD still getting some love. A very well implemented tool that just does what it does awesomely well.