红联Linux门户
Linux帮助

Sonar JAVA 4.3发布,Java代码质量分析

发布时间:2016-12-14 09:12:39来源:红联作者:baihuo
Sonar Java 4.3 发布了,Sonar (SonarQube)是一个开源平台,用于管理源代码的质量。Sonar 不只是一个质量数据报告工具,更是代码质量管理平台。支持的语言包括:Java、PHP、C#、C、Cobol、PL/SQL、Flex 等。SonarQube Java 是Sonar的一个插件,用来分析 Java 代码。

该版本带来了跨流程的数据流分析,并添加了6项规则:

CLASSES SHOULD NOT HAVE TOO MANY “STATIC” IMPORTS (CODE SMELL, BRAIN-OVERLOAD)
CLASSES SHOULD NOT HAVE TOO MANY FIELDS (CODE SMELL, BRAIN-OVERLOAD)
DOUBLE-CHECKED LOCKING SHOULD NOT BE USED (BUG, CERT, CWE, MULTI-THREADING)
“WRITEOBJECT” SHOULD NOT BE THE ONLY “SYNCHRONIZED” CODE IN A CLASS (CODE SMELL, CONFUSING)
“GETCLASS” SHOULD NOT BE USED FOR SYNCHRONIZATION (BUG, CERT, MULTI-THREADING, SECURITY)
“WAIT” AND “NOTIFY” SHOULD NOT BE CALLED WHEN MULTIPLE LOCKS ARE HELD(BUG, DEADLOCK, MULTI-THREADING)

软件详情:https://www.sonarsource.com/resources/product-news/2016/12/2016-12-14-java-4.3.0-released.html

下载地址:https://jira.sonarsource.com/jira/secure/ReleaseNote.jspa?projectId=10973&version=13369

来自:开源中国社区
文章评论

共有 0 条评论