Package | Total Files | Files with Violations | Priority 1 | Priority 2 | Priority 3 |
---|---|---|---|---|---|
All Packages | 19 | 2 | - | 2 | - |
people/entity | 8 | 2 | - | 2 | - |
people/repository | 11 | - | - | - | - |
Rule Name | Priority | Line # | Source Line / Message |
---|---|---|---|
SerializableClassMustDefineSerialVersionUID | 2 | 22 | [SRC]enum Animal { [MSG]The class people.entity.Animal implements Serializable but does not define a serialVersionUID |
Rule Name | Priority | Line # | Source Line / Message |
---|---|---|---|
SerializableClassMustDefineSerialVersionUID | 2 | 28 | [SRC]static enum Type { [MSG]The class people.entity.Feature$Type implements Serializable but does not define a serialVersionUID |
# | Rule Name | Description |
---|---|---|
1 | AbcMetric | Checks the ABC size metric for methods/classes. A method (or "closure field") with an ABC score greater than the maxMethodAbcScore property (60) causes a violation. Likewise, a class that has an (average method) ABC score greater than the maxClassAverageMethodAbcScore property (60) causes a violation. |
2 | AbstractClassName | Verifies that the name of an abstract class matches a regular expression specified in the regex property. If that property is null or empty, then this rule is not applied (i.e., it does nothing). It defaults to null, so this rule must be explicitly configured to be active. This rule ignores interfaces. |
3 | AbstractClassWithPublicConstructor | Checks for abstract classes that define a public constructor, which is useless and confusing. |
4 | AbstractClassWithoutAbstractMethod | The abstract class does not contain any abstract methods. An abstract class suggests an incomplete implementation, which is to be completed by subclasses implementing the abstract methods. If the class is intended to be used as a base class only (not to be instantiated direcly) a protected constructor can be provided prevent direct instantiation. |
5 | AddEmptyString | Finds empty string literals which are being added. This is an inefficient way to convert any type to a String. |
6 | AssertWithinFinallyBlock | Checks for assert statements within a finally block. An assert can throw an exception, hiding the original exception, if there is one. |
7 | AssignCollectionSort | The Collections.sort() method mutates the list and returns the list as a value. If you are assigning the result of sort() to a variable, then you probably don't realize that you're also modifying the original list as well. This is frequently the cause of subtle bugs. |
8 | AssignCollectionUnique | The Collections.unique() method mutates the list and returns the list as a value. If you are assigning the result of unique() to a variable, then you probably don't realize that you're also modifying the original list as well. This is frequently the cause of subtle bugs. |
9 | AssignmentInConditional | An assignment operator (=) was used in a conditional test. This is usually a typo, and the comparison operator (==) was intended. |
10 | BigDecimalInstantiation | Checks for calls to the BigDecimal constructors that take a double parameter, which may result in an unexpected BigDecimal value. |
11 | BitwiseOperatorInConditional | Checks for bitwise operations in conditionals, if you need to do a bitwise operation then it is best practive to extract a temp variable. |
12 | BooleanGetBoolean | This rule catches usages of java.lang.Boolean.getBoolean(String) which reads a boolean from the System properties. It is often mistakenly used to attempt to read user input or parse a String into a boolean. It is a poor piece of API to use; replace it with System.properties['prop']. |
13 | BooleanMethodReturnsNull | Method with Boolean return type returns explicit null. A method that returns either Boolean.TRUE, Boolean.FALSE or null is an accident waiting to happen. This method can be invoked as though it returned a value of type boolean, and the compiler will insert automatic unboxing of the Boolean value. If a null value is returned, this will result in a NullPointerException. |
14 | BracesForClass | Checks the location of the opening brace ({) for classes. By default, requires them on the same line, but the sameLine property can be set to false to override this. |
15 | BracesForForLoop | Checks the location of the opening brace ({) for for loops. By default, requires them on the same line, but the sameLine property can be set to false to override this. |
16 | BracesForIfElse | Checks the location of the opening brace ({) for if statements. By default, requires them on the same line, but the sameLine property can be set to false to override this. |
17 | BracesForMethod | Checks the location of the opening brace ({) for constructors and methods. By default, requires them on the same line, but the sameLine property can be set to false to override this. |
18 | BracesForTryCatchFinally | Checks the location of the opening brace ({) for try statements. By default, requires them on the line, but the sameLine property can be set to false to override this. |
19 | BrokenNullCheck | Looks for faulty checks for null that can cause a NullPointerException. |
20 | BrokenOddnessCheck | The code uses x % 2 == 1 to check to see if a value is odd, but this won't work for negative numbers (e.g., (-5) % 2 == -1). If this code is intending to check for oddness, consider using x & 1 == 1, or x % 2 != 0. |
21 | BuilderMethodWithSideEffects | A builder method is defined as one that creates objects. As such, they should never be of void return type. If a method is named build, create, or make, then it should always return a value. |
22 | BusyWait | Busy waiting (forcing a Thread.sleep() while waiting on a condition) should be avoided. Prefer using the gate and barrier objects in the java.util.concurrent package. |
23 | CatchArrayIndexOutOfBoundsException | Check the size of the array before accessing an array element rather than catching ArrayIndexOutOfBoundsException. |
24 | CatchError | Catching Error is dangerous; it can catch exceptions such as ThreadDeath and OutOfMemoryError. |
25 | CatchException | Catching Exception is often too broad or general. It should usually be restricted to framework or infrastructure code, rather than application code. |
26 | CatchIllegalMonitorStateException | Dubious catching of IllegalMonitorStateException. IllegalMonitorStateException is generally only thrown in case of a design flaw in your code (calling wait or notify on an object you do not hold a lock on). |
27 | CatchIndexOutOfBoundsException | Check that an index is valid before accessing an indexed element rather than catching IndexOutOfBoundsException. |
28 | CatchNullPointerException | Catching NullPointerException is never appropriate. It should be avoided in the first place with proper null checking, and it can mask underlying errors. |
29 | CatchRuntimeException | Catching RuntimeException is often too broad or general. It should usually be restricted to framework or infrastructure code, rather than application code. |
30 | CatchThrowable | Catching Throwable is dangerous; it can catch exceptions such as ThreadDeath and OutOfMemoryError. |
31 | ClassForName | Using Class.forName(...) is a common way to add dynamic behavior to a system. However, using this method can cause resource leaks because the classes can be pinned in memory for long periods of time. |
32 | ClassName | Verifies that the name of a class matches a regular expression. By default it checks that the class name starts with an uppercase letter and is followed by zero or more word characters (letters, numbers or underscores). The regex property specifies the regular expression used to validate the class name. |
33 | ClassNameSameAsFilename | Reports files containing only one top level class / enum / interface which is named differently than the file. |
34 | ClassSize | Checks if the size of a class exceeds the number of lines specified by the maxLines property (1000). |
35 | CloneWithoutCloneable | The method clone() should only be declared if the class implements the Cloneable interface. |
36 | CloneableWithoutClone | A class that implements java.lang.Cloneable should define a clone() method. |
37 | CloseWithoutCloseable | If a class defines a "void close()" then that class should implement java.io.Closeable. |
38 | ClosureAsLastMethodParameter | If a method is called and the last parameter is an inline closure then it can be declared outside of the method call brackets. |
39 | ClosureStatementOnOpeningLineOfMultipleLineClosure | Checks for closure logic on first line (after ->) for a multi-line closure. |
40 | CollectAllIsDeprecated | collectAll{} is deprecated since Groovy 1.8.1. Use collectNested instead{}. |
41 | CompareToWithoutComparable | If you implement a compareTo method then you should also implement the Comparable interface. If you don't then you could possibly get an exception if the Groovy == operator is invoked on your object. This is an issue fixed in Groovy 1.8 but present in previous versions. |
42 | ComparisonOfTwoConstants | Checks for expressions where a comparison operator or equals() or compareTo() is used to compare two constants to each other or two literals that contain only constant values., e.g.: 23 == 67, Boolean.FALSE != false, 0.17 <= 0.99, "abc" > "ddd", [a:1] <=> [a:2], [1,2].equals([3,4]) or [a:false, b:true].compareTo(['a':34.5, b:Boolean.TRUE]. |
43 | ComparisonWithSelf | Checks for expressions where a comparison operator or equals() or compareTo() is used to compare a variable to itself, e.g.: x == x, x != x, x <=> x, x < x, x =>= x, x.equals(x) or x.compareTo(x), where x is a variable. |
44 | ConfusingClassNamedException | This class is not derived from another exception, but ends with 'Exception'. This will be confusing to users of this class. |
45 | ConfusingMethodName | Checks for confusing method names. The referenced methods have names that differ only by capitalization. This is very confusing because if the capitalization were identical then one of the methods would override the other. |
46 | ConfusingMultipleReturns | Multiple return values can be used to set several variables at once. To use multiple return values, the left hand side of the assignment must be enclosed in parenthesis. If not, then you are not using multiple return values, you're only assigning the last element. |
47 | ConfusingTernary | In a ternary expression avoid negation in the test. For example, rephrase: "(x != y) ? diff : same" as: "(x == y) ? same : diff". Consistent use of this rule makes the code easier to read. Also, this resolves trivial ordering problems, such as "does the error case go first?" or "does the common case go first?". |
48 | ConsecutiveBlankLines | Makes sure there are no consecutive lines that are either blank or whitespace only. |
49 | ConsecutiveLiteralAppends | Violations occur when method calls to append(Object) are chained together with literals as parameters. The chained calls can be joined into one invocation. |
50 | ConsecutiveStringConcatenation | Catches concatenation of two string literals on the same line. These can safely by joined. |
51 | ConstantAssertExpression | Checks for assert statements where the assert boolean condition expression is a constant or literal value. |
52 | ConstantIfExpression | Checks for if statements with a constant value for the if expression, such as true, false, null, or a literal constant value. |
53 | ConstantTernaryExpression | Checks for ternary expressions with a constant value for the boolean expression, such as true, false, null, or a literal constant value. |
54 | ConstantsOnlyInterface | An interface should be used only to model a behaviour of a class: using an interface as a container of constants is a poor usage pattern. |
55 | CouldBeElvis | Catch an if block that could be written as an elvis expression. |
56 | CyclomaticComplexity | Checks the cyclomatic complexity for methods/classes.A method (or "closure field") with a cyclomatic complexity value greater than the maxMethodComplexity property (20) causes a violation. Likewise, a class that has an (average method) cyclomatic complexityvalue greater than the maxClassAverageMethodComplexity property (20) causes a violation. |
57 | DeadCode | Dead code appears after a return statement or an exception is thrown. If code appears after one of these statements then it will never be executed and can be safely deleted. |
58 | DoubleCheckedLocking | This rule detects double checked locking, where a 'lock hint' is tested for null before initializing an object within a synchronized block. Double checked locking does not guarantee correctness and is an anti-pattern. |
59 | DoubleNegative | There is no point in using a double negative, it is always positive. For instance !!x can always be simplified to x. And !(!x) can as well. |
60 | DuplicateCaseStatement | Check for duplicate case statements in a switch block, such as two equal integers or strings. |
61 | DuplicateImport | Duplicate import statements are unnecessary. |
62 | DuplicateListLiteral | Code containing duplicate List literals can usually be improved by declaring the List as a constant field. |
63 | DuplicateMapKey | A map literal is created with duplicated key. The map entry will be overwritten. |
64 | DuplicateMapLiteral | Code containing duplicate Map literals can usually be improved by declaring the Map as a constant field. |
65 | DuplicateNumberLiteral | Code containing number String literals can usually be improved by declaring the number as a constant field. The ignoreNumbers property (0,1) can optionally specify a comma-separated list of numbers to ignore. |
66 | DuplicateSetValue | A Set literal is created with duplicate constant value. A set cannot contain two elements with the same value. |
67 | DuplicateStringLiteral | Code containing duplicate String literals can usually be improved by declaring the String as a constant field. The ignoreStrings property () can optionally specify a comma-separated list of Strings to ignore. |
68 | ElseBlockBraces | Use braces for else blocks, even for a single statement. By default, braces are not required for an else if it is followed immediately by an if. Set the bracesRequiredForElseIf property to true to require braces is that situation as well. |
69 | EmptyCatchBlock | In most cases, exceptions should not be caught and ignored (swallowed). |
70 | EmptyClass | Reports classes without methods, fields or properties. Why would you need a class like this? |
71 | EmptyElseBlock | Empty else blocks are confusing and serve no purpose. |
72 | EmptyFinallyBlock | Empty finally blocks are confusing and serve no purpose. |
73 | EmptyForStatement | Empty for statements are confusing and serve no purpose. |
74 | EmptyIfStatement | Empty if statements are confusing and serve no purpose. |
75 | EmptyInstanceInitializer | An empty class instance initializer was found. It is safe to remove it. |
76 | EmptyMethod | A method was found without an implementation. If the method is overriding or implementing a parent method, then mark it with the @Override annotation. |
77 | EmptyMethodInAbstractClass | An empty method in an abstract class should be abstract instead, as developer may rely on this empty implementation rather than code the appropriate one. |
78 | EmptyStaticInitializer | An empty static initializer was found. It is safe to remove it. |
79 | EmptySwitchStatement | Empty switch statements are confusing and serve no purpose. |
80 | EmptySynchronizedStatement | Empty synchronized statements are confusing and serve no purpose. |
81 | EmptyTryBlock | Empty try blocks are confusing and serve no purpose. |
82 | EmptyWhileStatement | Empty while statements are confusing and serve no purpose. |
83 | EnumCustomSerializationIgnored | Checks for enums that define writeObject() or writeReplace() methods, or declare serialPersistentFields or serialVersionUID fields, all of which are ignored for enums. |
84 | EqualsAndHashCode | If either the boolean equals(Object) or the int hashCode() methods are overridden within a class, then both must be overridden. |
85 | EqualsOverloaded | The class has an equals method, but the parameter of the method is not of type Object. It is not overriding equals but instead overloading it. |
86 | ExceptionExtendsError | Errors are system exceptions. Do not extend them. |
87 | ExceptionExtendsThrowable | Checks for classes that extend java.lang.Throwable. Custom exception classes should subclass java.lang.Exception or one of its descendants. |
88 | ExceptionNotThrown | Checks for an exception constructor call without a throw as the last statement within a catch block. |
89 | ExplicitArrayListInstantiation | This rule checks for the explicit instantiation of an ArrayList using the no-arg constructor. In Groovy, it is best to write new ArrayList() as [], which creates the same object. |
90 | ExplicitCallToAndMethod | This rule detects when the and(Object) method is called directly in code instead of using the & operator. A groovier way to express this: a.and(b) is this: a & b |
91 | ExplicitCallToCompareToMethod | This rule detects when the compareTo(Object) method is called directly in code instead of using the <=>, >, >=, <, and <= operators. A groovier way to express this: a.compareTo(b) is this: a <=> b, or using the other operators. |
92 | ExplicitCallToDivMethod | This rule detects when the div(Object) method is called directly in code instead of using the / operator. A groovier way to express this: a.div(b) is this: a / b |
93 | ExplicitCallToEqualsMethod | This rule detects when the equals(Object) method is called directly in code instead of using the == or != operator. A groovier way to express this: a.equals(b) is this: a == b and a groovier way to express : !a.equals(b) is : a != b |
94 | ExplicitCallToGetAtMethod | This rule detects when the getAt(Object) method is called directly in code instead of using the [] index operator. A groovier way to express this: a.getAt(b) is this: a[b] |
95 | ExplicitCallToLeftShiftMethod | This rule detects when the leftShift(Object) method is called directly in code instead of using the << operator. A groovier way to express this: a.leftShift(b) is this: a << b |
96 | ExplicitCallToMinusMethod | This rule detects when the minus(Object) method is called directly in code instead of using the - operator. A groovier way to express this: a.minus(b) is this: a - b |
97 | ExplicitCallToModMethod | This rule detects when the mod(Object) method is called directly in code instead of using the % operator. A groovier way to express this: a.mod(b) is this: a % b |
98 | ExplicitCallToMultiplyMethod | This rule detects when the minus(Object) method is called directly in code instead of using the * operator. A groovier way to express this: a.multiply(b) is this: a * b |
99 | ExplicitCallToOrMethod | This rule detects when the or(Object) method is called directly in code instead of using the | operator. A groovier way to express this: a.or(b) is this: a | b |
100 | ExplicitCallToPlusMethod | This rule detects when the plus(Object) method is called directly in code instead of using the + operator. A groovier way to express this: a.plus(b) is this: a + b |
101 | ExplicitCallToPowerMethod | This rule detects when the power(Object) method is called directly in code instead of using the ** operator. A groovier way to express this: a.power(b) is this: a ** b |
102 | ExplicitCallToRightShiftMethod | This rule detects when the rightShift(Object) method is called directly in code instead of using the >> operator. A groovier way to express this: a.rightShift(b) is this: a >> b |
103 | ExplicitCallToXorMethod | This rule detects when the xor(Object) method is called directly in code instead of using the ^ operator. A groovier way to express this: a.xor(b) is this: a ^ b |
104 | ExplicitGarbageCollection | Calls to System.gc(), Runtime.getRuntime().gc(), and System.runFinalization() are not advised. Code should have the same behavior whether the garbage collection is disabled using the option -Xdisableexplicitgc or not. Moreover, "modern" jvms do a very good job handling garbage collections. If memory usage issues unrelated to memory leaks develop within an application, it should be dealt with JVM options rather than within the code itself. |
105 | ExplicitHashMapInstantiation | This rule checks for the explicit instantiation of a HashMap using the no-arg constructor. In Groovy, it is best to write new HashMap() as [:], which creates the same object. |
106 | ExplicitHashSetInstantiation | This rule checks for the explicit instantiation of a HashSet using the no-arg constructor. In Groovy, it is best to write new HashSet() as [] as Set, which creates the same object. |
107 | ExplicitLinkedHashMapInstantiation | This rule checks for the explicit instantiation of a LinkedHashMap using the no-arg constructor. In Groovy, it is best to write new LinkedHashMap() as [:], which creates the same object. |
108 | ExplicitLinkedListInstantiation | This rule checks for the explicit instantiation of a LinkedList using the no-arg constructor. In Groovy, it is best to write new LinkedList() as [] as Queue, which creates the same object. |
109 | ExplicitStackInstantiation | This rule checks for the explicit instantiation of a Stack using the no-arg constructor. In Groovy, it is best to write new Stack() as [] as Stack, which creates the same object. |
110 | ExplicitTreeSetInstantiation | This rule checks for the explicit instantiation of a TreeSet using the no-arg constructor. In Groovy, it is best to write new TreeSet() as [] as SortedSet, which creates the same object. |
111 | FileCreateTempFile | The File.createTempFile() method is insecure, and has been deprecated by the ESAPI secure coding library. It has been replaced by the ESAPI Randomizer.getRandomFilename(String) method. |
112 | FinalClassWithProtectedMember | This rule finds classes marked final that contain protected methods. If a class is final then it may not be subclassed, and there is therefore no point in having a method with protected visibility. Either the class should not be final or the method should be private or protected. |
113 | ForLoopShouldBeWhileLoop | A for loop without an init and update statement can be simplified to a while loop. |
114 | ForStatementBraces | Use braces for for statements, even for a single statement. |
115 | GStringAsMapKey | A GString should not be used as a map key since its hashcode is not guaranteed to be stable. Consider calling key.toString(). |
116 | GStringExpressionWithinString | Check for regular (single quote) strings containing a GString-type expression (${...}). |
117 | GetterMethodCouldBeProperty | If a class defines a public method that follows the Java getter notation, and returns a constant, then it is cleaner to provide a Groovy property for the value rather than a Groovy method. |
118 | GroovyLangImmutable | The groovy.lang.Immutable annotation has been deprecated and replaced by groovy.transform.Immutable. Do not use the Immutable in groovy.lang. |
119 | HardCodedWindowsFileSeparator | This rule finds usages of a Windows file separator within the constructor call of a File object. It is better to use the Unix file separator or use the File.separator constant. |
120 | HardCodedWindowsRootDirectory | This rule find cases where a File object is constructed with a windows-based path. This is not portable, and using the File.listRoots() method is a better alternative. |
121 | HashtableIsObsolete | The java.util.Hashtable class is effectively obsolete. Use the Java Collections Framework classes instead, including HashMap or ConcurrentHashMap. See the JDK javadoc. |
122 | IfStatementBraces | Use braces for if statements, even for a single statement. |
123 | IfStatementCouldBeTernary | Checks for if statements where both the if and else blocks contain only a single return statement with a constant or literal value |
124 | IllegalClassMember | Checks for classes containing fields/properties/methods matching configured illegal member modifiers or not matching any of the configured allowed member modifiers. |
125 | IllegalClassReference | Checks for reference to any of the classes configured in classNames. |
126 | IllegalPackageReference | Checks for reference to any of the packages configured in packageNames. |
127 | IllegalRegex | Checks for a specified illegal regular expression within the source code. The regex property specifies the regular expression to check for. It is required and cannot be null or empty. |
128 | IllegalString | Checks for a specified illegal string within the source code. |
129 | IllegalSubclass | Checks for classes that extend one of the specified set of illegal superclasses configured in superclassNames. |
130 | ImplementationAsType | Checks for use of a predefined set of concrete classes (e.g. ArrayList, Hashtable, ConcurrentHashMap) when specifying the type of a method parameter, closure parameter, constructor parameter, method return type or field type. The associated interfaces should be used to specify the type instead. |
131 | ImportFromSamePackage | An import of a class that is within the same package is unnecessary. |
132 | ImportFromSunPackages | Avoid importing anything from the 'sun.*' packages. These packages are not portable and are likely to change. |
133 | InconsistentPropertyLocking | Class contains similarly-named get and set methods where one method of the pair is marked either @WithReadLock or @WithWriteLock and the other is not locked at all. |
134 | InconsistentPropertySynchronization | Class contains similarly-named get and set methods where the set method is synchronized and the get method is not, or the get method is synchronized and the set method is not. |
135 | InsecureRandom | Reports usages of java.util.Random, which can produce very predictable results. If two instances of Random are created with the same seed and sequence of method calls, they will generate the exact same results. Use java.security.SecureRandom instead, which provides a cryptographically strong random number generator. SecureRandom uses PRNG, which means they are using a deterministic algorithm to produce a pseudo-random number from a true random seed. SecureRandom produces non-deterministic output. |
136 | IntegerGetInteger | This rule catches usages of java.lang.Integer.getInteger(String, ...) which reads an Integer from the System properties. It is often mistakenly used to attempt to read user input or parse a String into an Integer. It is a poor piece of API to use; replace it with System.properties['prop']. |
137 | InterfaceName | Verifies that the name of an interface matches a regular expression specified in the regex property. If that property is null or empty, then this rule is not applied (i.e., it does nothing). It defaults to null, so this rule must be explicitly configured to be active. |
138 | InvertedIfElse | An inverted if-else statement is one in which there is a single if statement with a single else branch and the boolean test of the if is negated. For instance if (!x) false else true. It is usually clearer to write this as if (x) true else false. |
139 | JUnitAssertEqualsConstantActualValue | Reports usages of org.junit.Assert.assertEquals([message,] expected, actual) where the 'actual' parameter is a constant or a literal. Most likely it was intended to be the 'expected' value. |
140 | LineLength | Checks the maximum length for each line of source code. It checks for number of characters, so lines that include tabs may appear longer than the allowed number when viewing the file. The maximum line length can be configured by setting the length property, which defaults to 120. |
141 | LocaleSetDefault | Checks for calls to Locale.setDefault(), which sets the Locale across the entire JVM. |
142 | LoggerForDifferentClass | Checks for instantiating a logger (Log4J, SLF4J, Logback, Apache Commons Logging or Java Util Logging) for a class other than the current class. |
143 | LoggerWithWrongModifiers | Logger objects should be declared private, static and final. If subclasses should have access to a Logger in a parent class then the Logger should be declared protected, non-static and final. This rule find loggers that are not declared with these modifiers. |
144 | LoggingSwallowsStacktrace | If you are logging an exception then the proper API is to call error(Object, Throwable), which will log the message and the exception stack trace. If you call error(Object) then the stacktrace may not be logged. |
145 | LongLiteralWithLowerCaseL | In Java and Groovy, you can specify long literals with the L or l character, for instance 55L or 24l. It is best practice to always use an uppercase L and never a lowercase l. This is because 11l rendered in some fonts may look like 111 instead of 11L. |
146 | MethodCount | A class with too many methods is probably a good suspect for refactoring, in order to reduce its complexity and find a way to have more fine grained objects.The maxMethods property (30) specifies the threshold. |
147 | MethodName | Verifies that the name of each method matches a regular expression. By default it checks that the method name starts with a lowercase letter. The regex property specifies the regular expression to check the method name against. The ignoreMethodNames property (null) can specify method names that should be ignored, optionally containing wildcard characters ('*' or '?'). |
148 | MethodSize | Checks if the size of a method exceeds the number of lines specified by the maxLines property (100). |
149 | MissingBlankLineAfterImports | Makes sure there is a blank line after the imports of a source code file. |
150 | MissingBlankLineAfterPackage | Makes sure there is a blank line after the package statement of a source code file. |
151 | MissingNewInThrowStatement | A common Groovy mistake when throwing exceptions is to forget the new keyword. For instance, "throw RuntimeException()" instead of "throw new RuntimeException()". If the error path is not unit tested then the production system will throw a Method Missing exception and hide the root cause. This rule finds constructs like "throw RuntimeException()" that look like a new keyword was meant to be used but forgotten. |
152 | MultipleLoggers | This rule catches classes that have more than one logger object defined. Typically, a class has zero or one logger objects. |
153 | MultipleUnaryOperators | Checks for multiple consecutive unary operators. These are confusing, and are likely typos and bugs. |
154 | NestedBlockDepth | Checks for blocks or closures nested more than maxNestedBlockDepth (5) levels deep. |
155 | NestedSynchronization | Nested synchronized statements should be avoided. Nested synchronized statements are either useless (if the lock objects are identical) or prone to deadlock. |
156 | NonFinalPublicField | Finds code that violates secure coding principles for mobile code by declaring a member variable public but not final. |
157 | NonFinalSubclassOfSensitiveInterface | The permissions classes such as java.security.Permission and java.security.BasicPermission are designed to be extended. Classes that derive from these permissions classes, however, must prohibit extension. This prohibition ensures that malicious subclasses cannot change the properties of the derived class. Classes that implement sensitive interfaces such as java.security.PrivilegedAction and java.security.PrivilegedActionException must also be declared final for analogous reasons. |
158 | ObjectFinalize | The finalize() method should only be called by the JVM after the object has been garbage collected. |
159 | ObjectOverrideMisspelledMethodName | Verifies that the names of the most commonly overridden methods of Object: equals, hashCode and toString, are correct. |
160 | PackageName | Verifies that the package name for a class matches a regular expression. By default it checks that the package name consists of only lowercase letters, separated by periods. The regex property specifies the regular expression used to validate the package name. The packageNameRequired property indicates whether a package name declaration is required for all classes. |
161 | ParameterName | Verifies that the name of each parameter matches a regular expression. This rule applies to method parameters, constructor parameters and closure parameters. By default it checks that parameter names start with a lowercase letter and contains only letters or numbers. The regex property specifies the default regular expression used to validate the parameter name. The ignoreParameterNames property (null) can specify parameter names that should be ignored, optionally containing wildcard characters ('*' or '?'). |
162 | ParameterReassignment | Checks for a method or closure parameter being reassigned to a new value within the body of the method/closure, which is a confusing and questionable practice. Use a temporary variable instead. |
163 | PrintStackTrace | Checks for calls to printStackTrace(). |
164 | Println | Checks for calls to this.print(), this.println() or this.printf(). |
165 | PrivateFieldCouldBeFinal | Checks for private fields that are only set within a constructor or field initializer. Such fields can safely be made final. |
166 | PropertyName | Verifies that the name of each property matches a regular expression. By default it checks that property names other than 'static final' start with a lowercase letter and contains only letters or numbers, and 'static final' property names start with an uppercase letter and contain only uppercase letters, numbers and underscores. The regex property specifies the default regular expression used to validate property names. The finalRegex property specifies the regular expression to validate 'final' property names. The staticRegex property specifies the regular expression to validate 'static' property names. The staticFinalRegex property specifies the regular expression to validate 'static final' property names. The ignorePropertyNames property (null) can specify property names that should be ignored, optionally containing wildcard characters ('*' or '?'). |
167 | PublicFinalizeMethod | Creates a violation when the program violates secure coding principles by declaring a finalize() method public. |
168 | PublicInstanceField | Using public fields is considered to be a bad design. Use properties instead. |
169 | RandomDoubleCoercedToZero | The Math.random() method returns a double result greater than or equal to 0.0 and less than 1.0. If you coerce this result into an Integer or int, then it is coerced to zero. Casting the result to int, or assigning it to an int field is probably a bug. |
170 | RemoveAllOnSelf | Don't use removeAll to clear a collection. If you want to remove all elements from a collection c, use c.clear, not c.removeAll(c). Calling c.removeAll(c) to clear a collection is less clear, susceptible to errors from typos, less efficient and for some collections, might throw a ConcurrentModificationException. |
171 | RequiredRegex | Checks for a specified regular expression that must exist within the source code. The regex property specifies the regular expression to check for. It is required and cannot be null or empty. |
172 | RequiredString | Checks for a specified text string that must exist within the source code. The string property specifies the String to check for. It is required and cannot be null or empty. |
173 | ReturnFromFinallyBlock | Returning from a finally block is confusing and can hide the original exception. |
174 | ReturnNullFromCatchBlock | Returning null from a catch block often masks errors and requires the client to handle error codes. In some coding styles this is discouraged. |
175 | ReturnsNullInsteadOfEmptyArray | Consider returning a zero length array rather than null. It is often a better design to return a length zero array rather than a null reference to indicate that there are no results (i.e., an empty list of results). This way, no explicit check for null is needed by clients of the method. |
176 | ReturnsNullInsteadOfEmptyCollection | Consider returning a zero length collection rather than null. It is often a better design to return a length zero collection rather than a null reference to indicate that there are no results (i.e., an empty list of results). This way, no explicit check for null is needed by clients of the method. |
177 | SerialPersistentFields | To use a Serializable object's serialPersistentFields correctly, it must be declared private, static, and final. |
178 | SerialVersionUID | A serialVersionUID is normally intended to be used with Serialization. It needs to be of type long, static, and final. Also, it should have a visibility modifier such as public or private. Providing no modifier creates a Property and Groovy generates a getter, which is probably not intended. |
179 | SerializableClassMustDefineSerialVersionUID | Classes that implement Serializable should define a serialVersionUID. If you don't define serialVersionUID, the system will make one by hashing most of your class's features. Then if you change anything, the UID will change and Java won't let you reload old data. |
180 | SimpleDateFormatMissingLocale | Be sure to specify a Locale when creating a new instance of SimpleDateFormat; the class is locale-sensitive. If you instantiate SimpleDateFormat without a Locale parameter, it will format the date and time according to the default Locale. Both the pattern and the Locale determine the format. For the same pattern, SimpleDateFormat may format a date and time differently if the Locale varies. |
181 | SpaceAfterCatch | Check that there is exactly one space (blank) after the catch keyword and before the opening parenthesis. |
182 | SpaceAfterComma | Checks that there is at least one space or whitespace following each comma. That includes checks for method and closure declaration parameter lists, method call parameter lists, Map literals and List literals. |
183 | SpaceAfterFor | Check that there is exactly one space (blank) after the for keyword and before the opening parenthesis. |
184 | SpaceAfterIf | Check that there is exactly one space (blank) after the if keyword and before the opening parenthesis. |
185 | SpaceAfterOpeningBrace | Check that there is at least one space (blank) or whitespace after each opening brace ("{") for method/class/interface declarations, closure expressions and block statements. |
186 | SpaceAfterSemicolon | Checks that there is at least one space or whitespace following each semicolon separating multiple statements on a single line or the clauses within a classic for loop. |
187 | SpaceAfterSwitch | Check that there is exactly one space (blank) after the switch keyword and before the opening parenthesis. |
188 | SpaceAfterWhile | Check that there is exactly one space (blank) after the while keyword and before the opening parenthesis. |
189 | SpaceAroundClosureArrow | Checks that there is whitespace around the closure arrow (->) symbol |
190 | SpaceAroundOperator | Check that there is at least one space (blank) or whitespace around each binary operator. |
191 | SpaceBeforeClosingBrace | Check that there is at least one space (blank) or whitespace before each closing brace ("}") for method/class/interface declarations, closure expressions and block statements. |
192 | SpaceBeforeOpeningBrace | Check that there is at least one space (blank) or whitespace before each opening brace ("{") for method/class/interface declarations, closure expressions and block statements. |
193 | StatelessClass | Checks for fields on classes that should remain "stateless" and reentrant. The ignoreFieldNames property (null) specifies one or more field names that should be ignored. The ignoreFieldTypes property specifies one or more field type names that should be ignored. Both can optionally contain wildcard characters ('*' or '?'). |
194 | StatelessSingleton | There is no point in creating a stateless Singleton because there is nothing within the class that needs guarding and no side effects to calling the constructor. Just create new instances of the object or write a Utility class with static methods. |
195 | StaticCalendarField | Calendar objects should not be used as static fields. Calendars are inherently unsafe for multihtreaded use. Sharing a single instance across thread boundaries without proper synchronization will result in erratic behavior of the application. |
196 | StaticConnection | Creates violations when a java.sql.Connection object is used as a static field. Database connections stored in static fields will be shared between threads, which is unsafe and can lead to race conditions. |
197 | StaticDateFormatField | DateFormat objects should not be used as static fields. DateFormat are inherently unsafe for multithreaded use. Sharing a single instance across thread boundaries without proper synchronization will result in erratic behavior of the application. |
198 | StaticMatcherField | Matcher objects should not be used as static fields. Matcher instances are inherently unsafe for multithreaded use. Sharing a single instance across thread boundaries without proper synchronization will result in erratic behavior of the application. |
199 | StaticSimpleDateFormatField | SimpleDateFormat objects should not be used as static fields. SimpleDateFormat are inherently unsafe for multi-threaded use. Sharing a single instance across thread boundaries without proper synchronization will result in erratic behavior of the application. |
200 | SwallowThreadDeath | Checks for code that catches ThreadDeath without re-throwing it. |
201 | SynchronizedMethod | This rule reports uses of the synchronized keyword on methods. Synchronized methods are the same as synchronizing on 'this', which effectively make your synchronization policy public and modifiable by other objects. To avoid possibilities of deadlock, it is better to synchronize on internal objects. |
202 | SynchronizedOnBoxedPrimitive | The code synchronizes on a boxed primitive constant, such as an Integer. Since Integer objects can be cached and shared, this code could be synchronizing on the same object as other, unrelated code, leading to unresponsiveness and possible deadlock |
203 | SynchronizedOnGetClass | Synchronization on getClass rather than class literal. This instance method synchronizes on this.getClass(). If this class is subclassed, subclasses will synchronize on the class object for the subclass, which isn't likely what was intended. |
204 | SynchronizedOnReentrantLock | Synchronizing on a ReentrantLock field is almost never the intended usage. A ReentrantLock should be obtained using the lock() method and released in a finally block using the unlock() method. |
205 | SynchronizedOnString | Synchronization on a String field can lead to deadlock because Strings are interned by the JVM and can be shared. |
206 | SynchronizedOnThis | This rule reports uses of the synchronized blocks where the synchronization reference is 'this'. Doing this effectively makes your synchronization policy public and modifiable by other objects. To avoid possibilities of deadlock, it is better to synchronize on internal objects. |
207 | SynchronizedReadObjectMethod | Catches Serializable classes that define a synchronized readObject method. By definition, an object created by deserialization is only reachable by one thread, and thus there is no need for readObject() to be synchronized. If the readObject() method itself is causing the object to become visible to another thread, that is an example of very dubious coding style. |
208 | SystemErrPrint | Checks for calls to System.err.print(), System.err.println() or System.err.printf(). |
209 | SystemExit | Web applications should never call System.exit(). A call to System.exit() is probably part of leftover debug code or code imported from a non-J2EE application. |
210 | SystemOutPrint | Checks for calls to System.out.print(), System.out.println() or System.out.printf(). |
211 | SystemRunFinalizersOnExit | Method calls to System.runFinalizersOnExit() should not be allowed. This method is inherently non-thread-safe, may result in data corruption, deadlock, and may effect parts of the program far removed from it's call point. It is deprecated, and it's use strongly discouraged. |
212 | TernaryCouldBeElvis | Checks for ternary expressions where the boolean and true expressions are the same. These can be simplified to an Elvis expression. |
213 | ThisReferenceEscapesConstructor | Reports constructors passing the 'this' reference to other methods. This equals exposing a half-baked objects and can lead to race conditions during initialization. For reference, see Java Concurrency Gotchas by Alex Miller and Java theory and practice: Safe construction techniques by Brian Goetz. |
214 | ThreadLocalNotStaticFinal | ThreadLocal fields should be static and final. In the most common case a java.lang.ThreadLocal instance associates state with a thread. A non-static non-final java.lang.ThreadLocal field associates state with an instance-thread combination. This is seldom necessary and often a bug which can cause memory leaks and possibly incorrect behavior. |
215 | ThreadYield | Method calls to Thread.yield() should not be allowed. This method has no useful guaranteed semantics, and is often used by inexperienced programmers to mask race conditions. |
216 | ThrowError | Checks for throwing an instance of java.lang.Error. |
217 | ThrowException | Checks for throwing an instance of java.lang.Exception. |
218 | ThrowExceptionFromFinallyBlock | Throwing an exception from a finally block is confusing and can hide the original exception. |
219 | ThrowNullPointerException | Checks for throwing an instance of java.lang.NullPointerException. |
220 | ThrowRuntimeException | Checks for throwing an instance of java.lang.RuntimeException. |
221 | ThrowThrowable | Checks for throwing an instance of java.lang.Throwable. |
222 | ToStringReturnsNull | Checks for toString() methods that return null. |
223 | TrailingWhitespace | Checks that no lines of source code end with whitespace characters. |
224 | UnnecessaryBigDecimalInstantiation | It is unnecessary to instantiate BigDecimal objects. Instead just use the decimal literal or the 'G' identifier to force the type, such as 123.45 or 123.45G. |
225 | UnnecessaryBigIntegerInstantiation | It is unnecessary to instantiate BigInteger objects. Instead just use the literal with the 'G' identifier to force the type, such as 8G or 42G. |
226 | UnnecessaryBooleanExpression | Checks for unnecessary boolean expressions, including ANDing (&&) or ORing (||) with true, false, null, or a Map/List/String/Number literal. Also checks for negation (!) of true, false, null, or a Map/List/String/Number literal. |
227 | UnnecessaryBooleanInstantiation | Use Boolean.valueOf() for variable values or Boolean.TRUE and Boolean.FALSE for constant values instead of calling the Boolean() constructor directly or calling Boolean.valueOf(true) or Boolean.valueOf(false). |
228 | UnnecessaryCallForLastElement | This rule checks for excessively verbose methods of accessing the last element of an array or list. For instance, it is possible to access the last element of an array by performing array[array.length - 1], in Groovy it is simpler to either call array.last() or array[-1]. The same is true for lists. This violation is triggered whenever a get, getAt, or array-style access is used with an object size check. |
229 | UnnecessaryCallToSubstring | Calling String.substring(0) always returns the original string. This code is meaningless. |
230 | UnnecessaryCast | Checks for unnecessary cast operations |
231 | UnnecessaryCatchBlock | Violations are triggered when a catch block does nothing but throw the original exception. In this scenario there is usually no need for a catch block, just let the exception be thrown from the original code. This condition frequently occurs when catching an exception for debugging purposes but then forgetting to take the catch statement out. |
232 | UnnecessaryCollectCall | Some method calls to Object.collect(Closure) can be replaced with the spread operator. For instance, list.collect { it.multiply(2) } can be replaced by list*.multiply(2). Warning: if a collection is null, collect will return an empty list, while *. will return null. |
233 | UnnecessaryCollectionCall | Useless call to collections. This call doesn't make sense. For any collection c, calling c.containsAll(c) should always be true, and c.retainAll(c) should have no effect. |
234 | UnnecessaryConstructor | This rule detects when a constructor is not necessary; i.e., when there's only one constructor, it's public, has an empty body, and takes no arguments. |
235 | UnnecessaryDefInFieldDeclaration | If a field has a visibility modifier or a type declaration, then the def keyword is unneeded. For instance, 'static def constraints = {}' is redundant and can be simplified to 'static constraints = {}. |
236 | UnnecessaryDefInMethodDeclaration | If a method has a visibility modifier or a type declaration, then the def keyword is unneeded. For instance 'def private method() {}' is redundant and can be simplified to 'private method() {}'. |
237 | UnnecessaryDefInVariableDeclaration | If a variable has a visibility modifier or a type declaration, then the def keyword is unneeded. For instance 'def private n = 2' is redundant and can be simplified to 'private n = 2'. |
238 | UnnecessaryDotClass | To make a reference to a class, it is unnecessary to specify the '.class' identifier. For instance String.class can be shortened to String. |
239 | UnnecessaryDoubleInstantiation | It is unnecessary to instantiate Double objects. Instead just use the double literal or the 'D' identifier to force the type, such as 123.45d or 0.42d. |
240 | UnnecessaryElseStatement | When an if statement block ends with a return statement the else is unnecessary. The logic in the else branch can be run without being in a new scope. |
241 | UnnecessaryFinalOnPrivateMethod | A private method is marked final. Private methods cannot be overridden, so marking it final is unnecessary. |
242 | UnnecessaryFloatInstantiation | It is unnecessary to instantiate Float objects. Instead just use the float literal with the 'F' identifier to force the type, such as 123.45F or 0.42f. |
243 | UnnecessaryGString | String objects should be created with single quotes, and GString objects created with double quotes. Creating normal String objects with double quotes is confusing to readers. |
244 | UnnecessaryGetter | Checks for explicit calls to getter/accessor methods which can, for the most part, be replaced by property access. A getter is defined as a method call that matches get[A-Z] but not getClass() or get[A-Z][A-Z] such as getURL(). Getters do not take method arguments. |
245 | UnnecessaryGroovyImport | A Groovy file does not need to include an import for classes from java.lang, java.util, java.io, java.net, groovy.lang and groovy.util, as well as the classes java.math.BigDecimal and java.math.BigInteger. |
246 | UnnecessaryIfStatement | Checks for if statements where the if and else blocks (or subsequent fall-through to a return) are merely returning true and false constants. These cases can be replaced by a simple return statement. |
247 | UnnecessaryInstanceOfCheck | This rule finds instanceof checks that cannot possibly evaluate to true. For instance, checking that (!variable instanceof String) will never be true because the result of a not expression is always a boolean. |
248 | UnnecessaryInstantiationToGetClass | Avoid instantiating an object just to call getClass() on it; use the .class public member instead. |
249 | UnnecessaryIntegerInstantiation | It is unnecessary to instantiate Integer objects. Instead just use the literal with the 'I' identifier to force the type, such as 8I or 42i. |
250 | UnnecessaryLongInstantiation | It is unnecessary to instantiate Long objects. Instead just use the literal with the 'L' identifier to force the type, such as 8L or 42L. |
251 | UnnecessaryModOne | Any expression mod 1 (exp % 1) is guaranteed to always return zero. This code is probably an error, and should be either (exp & 1) or (exp % 2). |
252 | UnnecessaryNullCheck | Groovy contains the safe dereference operator, which can be used in boolean conditional statements to safely replace explicit "x == null" tests. |
253 | UnnecessaryNullCheckBeforeInstanceOf | There is no need to check for null before an instanceof; the instanceof keyword returns false when given a null argument. |
254 | UnnecessaryObjectReferences | Violations are triggered when an excessive set of consecutive statements all reference the same variable. This can be made more readable by using a with or identity block. |
255 | UnnecessaryOverridingMethod | The overriding method merely calls the same method defined in a superclass |
256 | UnnecessaryParenthesesForMethodCallWithClosure | If a method is called and the only parameter to that method is an inline closure then the parentheses of the method call can be omitted. |
257 | UnnecessaryPublicModifier | The 'public' modifier is not required on methods or classes. |
258 | UnnecessarySelfAssignment | Method contains a pointless self-assignment to a variable or property. |
259 | UnnecessaryStringInstantiation | Use a String literal (e.g., "...") instead of calling the corresponding String constructor (new String("..")) directly. |
260 | UnnecessarySubstring | This rule finds usages of String.substring(int) and String.substring(int, int) that can be replaced by use of the subscript operator. For instance, var.substring(5) can be replaced with var[5..-1]. |
261 | UnnecessaryTernaryExpression | Checks for ternary expressions where the conditional expression always evaluates to a boolean and the true and false expressions are merely returning true and false constants. Also checks for ternary expressions where both expressions are the same constant or variable. |
262 | UnnecessaryToString | Checks for unnecessary calls to toString(). |
263 | UnnecessaryTransientModifier | The field is marked as transient, but the class isn't Serializable, so marking it as transient has no effect. |
264 | UnsafeArrayDeclaration | Triggers a violation when an array is declared public, final, and static. Secure coding principles state that, in most cases, an array declared public, final and static is a bug because arrays are mutable objects. |
265 | UnsafeImplementationAsMap | Reports incomplete interface implementations created by map-to-interface coercions. Example: [hasNext: { ... }] as Iterator (Not all Iterator methods are implemented. An UnsupportedOperationException will be thrown upon call to e.g. next().) By default, this rule does not apply to test files. |
266 | UnusedArray | Checks for array allocations that are not assigned or used, unless it is the last statement within a block. |
267 | UnusedImport | Imports for a class that is never referenced within the source file is unnecessary. |
268 | UnusedMethodParameter | This rule finds instances of method parameters not being used. It does not analyze private methods (that is done by the UnusedPrivateMethodParameter rule) or methods marked @Override. |
269 | UnusedObject | Checks for object allocations that are not assigned or used, unless it is the last statement within a block |
270 | UnusedPrivateField | Checks for private fields that are not referenced within the same class. |
271 | UnusedPrivateMethod | Checks for private methods that are not referenced within the same class. |
272 | UnusedPrivateMethodParameter | Checks for parameters to private methods that are not referenced within the method body. |
273 | UnusedVariable | Checks for variables that are never referenced. The ignoreVariableNames property (null) specifies one or more variable names that should be ignored, optionally containing wildcard characters ('*' or '?'). |
274 | UseCollectMany | In many case collectMany() yields the same result as collect{}.flatten(). It is easier to understand and more clearly conveys the intent. |
275 | UseCollectNested | Instead of nested collect{}-calls use collectNested{} |
276 | UseOfNotifyMethod | This code calls notify() rather than notifyAll(). Java monitors are often used for multiple conditions. Calling notify() only wakes up one thread, meaning that the thread woken up might not be the one waiting for the condition that the caller just satisfied. |
277 | VariableName | Verifies that the name of each method matches a regular expression. By default it checks that non-'final' variable names start with a lowercase letter and contains only letters or numbers, and 'final' variable names start with an uppercase letter and contain only uppercase letters, numbers and underscores. The regex property specifies the default regular expression used to validate a non-'final' variable name. The finalRegex property specifies the regular expression used to validate 'final' variable names. The ignoreVariableNames property (null) can specify variable names that should be ignored, optionally containing wildcard characters ('*' or '?'). |
278 | VectorIsObsolete | The java.util.Vector class is effectively obsolete. Use the Java Collections Framework classes instead, including ArrayList or Collections.synchronizedList(). See the JDK javadoc. |
279 | VolatileArrayField | Volatile array fields are unsafe because the contents of the array are not treated as volatile. Changing the entire array reference is visible to other threads, but changing an array element is not. |
280 | VolatileLongOrDoubleField | Long or double fields should not be declared as volatile. Java specifies that reads and writes from such fields are atomic, but many JVM's have violated this specification. Unless you are certain of your JVM, it is better to synchronize access to such fields rather than declare them volatile. This rule flags fields marked volatile when their type is double or long or the name of their type is "Double" or "Long". |
281 | WaitOutsideOfWhileLoop | Calls to Object.wait() must be within a while loop. Consider using the Java concurrency utilities instead of wait() and notify(). |
282 | WhileStatementBraces | Use braces for while statements, even for a single statement. |