How are people using Findbugs?

[Andy Yang-3]

Hi all.  I am curious to know how people are using Findbugs in a commercial setting.  Is it mostly a few developers who use Findbugs proactively but in an isolated fashion, or is it a part of the standard software development process?  I'm interested to learn more about companies who are using (or want to use) Findbugs on a larger scale and what the benefits and challenges are.  Also, how people measure success - is it simply making it available for developers to voluntarily use or are there specific metrics being used to track progress.

You can reply to this message or to me directly.  Thanks in advance for your insight.

--
Andy

Code Integrity Solutions
http://www.codeintegritysolutions.com


_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

[Dave Brosius-2]

For us, Findbugs is run twice everyday from hudson, and the difference report is mailed to all the developers. We use it on a voluntary mechanism, but it's relatively apparent for our group, who's bugs are being generated, as only the new bugs are being mailed.

-----Original Message-----
From: "Andy Yang" <andy@...>
Sent: Friday, July 31, 2009 12:57am
To: findbugs-discuss@...
Subject: [FB-Discuss] How are people using Findbugs?

Hi all.  I am curious to know how people are using Findbugs in a commercial setting.  Is it mostly a few developers who use Findbugs proactively but in an isolated fashion, or is it a part of the standard software development process?  I'm interested to learn more about companies who are using (or want to use) Findbugs on a larger scale and what the benefits and challenges are.  Also, how people measure success - is it simply making it available for developers to voluntarily use or are there specific metrics being used to track progress.

You can reply to this message or to me directly.  Thanks in advance for your insight.

--
Andy

Code Integrity Solutions
http://www.codeintegritysolutions.com


_______________________________________________
Findbugs-discuss mailing list
Findbugs-discuss@...
https://mailman.cs.umd.edu/mailman/listinfo/findbugs-discuss

[kokaku]

Andy Yang-3 wrote:

Hi all.  I am curious to know how people are using Findbugs in a commercial
setting.  Is it mostly a few developers who use Findbugs proactively but in
an isolated fashion, or is it a part of the standard software development
process?...Also, how people measure success

We're an 7-10 dev team within a larger (1000+ company - media, not technology - the number of devs within the company is probably less than 50). We recently started using checkstyle, findbugs, jdepend, and the like to make code maintanance an ongoing process.

This is a team-wide effort (it's really no good for a single developer to make the effort if other devs are going to come along and dirty the same code by not playing along). There was some pushback at first because of the extra work, but we've tried to make it as easy as possible by starting with a small project that only had a couple developers, weeding out trouble-spots, and documenting best practices on an internal wiki.

We use IDE plugins and Ant locally and, via Ant, it is part of our continuous-integration process (we use TeamCity). At first, we used the output as feedback to spur fixes. Once, we got our numbers to zero (which didn't take too long), we used the output to fail builds in continous-integration if there were new bugs introduced. So far, this is working well for us and has caught a number of things that may or may not have tripped us up down the road, but were certainly bad practice.

Feel free to contact me if you have further questions.