Owen O'Malley wrote:
The last time I used them, findBugs (http://findbugs.sourceforge.net/) was better than PMD in terms of both finding "real" things and a lower false positive rate.
Unfortunately FindBugs is under LGPL, so we could not include it in Hadoop's lib directory, but must rather get folks to install it themselves.
Doug
