Hi, I've setup a Jenkins job for daily Sonar analysis of Tobago trunk. You can find the results here: https://builds.apache.org/analysis/overview?id=org.apache.myfaces.tobago%3Atobago
There are some false positives in the report but also things that should be fixed. Regards Dennis