Category: Articles

This presentation reviews recent developments in code analysis as well as the history of static analysis in commercial software and its evolution in the academic world. It provides an overview of the current commercial landscape, and conclude with best practices for organizations looking to bring static analysis into their software development environment and software testing practices. Historically, static code analysis has been widely used to identify defined sets of security issues via overnight runs across entire code bases. A recent trend has been the evolution of static analysis methods and tools to: 1. become much more scalable and 2. leverage machine learning to substantially improve code quality. These improvements allow a much tighter integration of these software quality assurances practices into modern agile development processes. At the same time, the scope of these code analysis tools has broadened from purely security-relevant bugs to performance and reliability issues like memory leaks and data races. Google and Facebook have pioneered a new model of static analysis deployment that involves improving developer productivity via broad deployment of extremely scalable static analysis (billions of lines of code / thousands of commits per day). Video producer:

In addition to being another popular library of JSON in Java, the Jackson Library is very well known for its ability to offer deep customization in an opinionated way.

Memory leaks can be difficult to detect, and even harder to get rid of if you don’t know what to be on the lookout for. In this post, we explore the different tools you can use to find and fix them.

Last week Quarkus 1.1.1.Final was released, a VS Code update added more features for Java and TIOBE’s Programming Language of the Year was announced.

Apple has open-sourced ServiceTalk, a JVM network application framework that provides a common and extensible networking abstraction built on top of Netty. ServiceTalk was conceived to improve low-level abstractions provided by Netty such as threading and usability. The goal of open-sourcing ServiceTalk was to provide building blocks that would enable contributions from the Java community.

JDK 14 is now in Rampdown Phase One – meaning that the overall feature set is frozen and no further features will be targeted to this release.

In this post, we’ll learn the basics of the Apache Maven build tool to compile and package a simple Java project.

Java’s finally keyword is helpful for clean-up operations around code that may throw errors. We explore how it works and when it can have unexpected behaviour.

Learn about decompilation in Eclipse and IntelliJ IDEA IDEs as well as a command-line option when they aren’t available.

You can use this guide to understand how to connect to and query any database in Java. Covers JDBC API, as well as frameworks like Hibernate, jOOQ or Spring Data.