(side note: compiling with "-target jsr14" will allow us to use generics
and compile to JDK 1.4 usable code)
Analyzes program w/out executing
Not a replacement for testing
Find bugs that are one step removed from a syntax error
Finding different categories of problems
"Embrace and fix your dumb mistakes"
Bad method calls: not using return parameters, not throwing newly
OpenJPA 38 issues (35 critical)
Checks for null when subsequent actions would cause an NPE (numerous found
Bad practices, like hashCode() w/out equals()
Feedback about API-specific findbugs detectors (e.g., for JPA) would be
OpenJPA is "good" to "average" in the number of bugs found.
SimpleDateFormat is not thread-safe