David Hovemeyer has posted FindBugs 0.7.4, an automated open source tool for finding potential bugs in Java code. This release detects JDBC resources (connections and statements) that aren't closed on all paths out of method. Otherwise, it mostly fixes bugs and makes various minor improvements.
I tested this release on the latest XOM code base.
It found one stream that wasn't closed on all paths out of a method,
one possible bug involving string comparisons that used == instead of .equals() (though I suspect those strings had been interned) and a lot of false positives.
I was quite surprised it didn't find more since I had made major changes to XOM's internals since the last time I ran any static code analysis tools. On the plus side, this is the first time I can remember a tool of this nature just working out of the box without having to struggle to set up the tool just right.
Java 1.4 or later is required. FindBugs is published under the LGPL.
Jeff Pace has released version 5.0 of DoctorJ, an LGPL'd Java application (previous version were written in written in C++ for Linux) that analyzes Java source code in three areas:
Michael Fuchs has posted version 0.57 of his DocBook Doclet that creates DocBook SGML and XML documents from JavaDoc. This release validates the output against the DocBook DTD and can generate PDF output through an XSL-FO intermediary.