PMD (software)

This article needs additional citations for verification. Please help improve this article by adding citations to reliable sources. Unsourced material may be challenged and removed. Find sources: "PMD" software – news · newspapers · books · scholar · JSTOR (August 2015) (Learn how and when to remove this message)

PMD

Initial release	4 November 2002
Stable release	7.6.0[1]  / 27 September 2024
Repository	github.com/pmd/pmd
Written in	Java
Operating system	Windows, Linux, macOS
Type	Static program analysis tool
License	BSD License, Apache License 2.0, GNU Lesser General Public License[2]
Website	pmd.github.io

PMD is an open source static source code analyzer that reports on issues found within application code. PMD includes built-in rule sets and supports the ability to write custom rules. PMD does not report compilation errors, as it only can process well-formed source files. Rather, PMD is designed to detect inefficient code or bad programming habits, which can reduce the performance and maintainability of the program if they accumulate. It can analyze files written in Java, JavaScript, Apex and Visualforce, PLSQL, Apache Velocity, XML, and XSL.

While PMD does not officially stand for anything,^[3] several retro acronyms have been suggested, including for instance Programming Mistake Detector and Project Meets Deadline.^[4]

PMD is able to detect flaws or possible flaws in source code, like:

• Bugs—Empty try/catch/finally/switch blocks.
• Dead code—Unused local variables, parameters and private methods.
• Empty if/while statements.
• Overcomplicated expressions—Unnecessary if statements, for loops that could be while loops.
• Suboptimal code—Wasteful String/StringBuffer usage.
• Classes with high Cyclomatic Complexity measurements.
• Duplicate code—Copied/pasted code can mean copied/pasted bugs, and decreases maintainability.

PMD is released under a BSDish license while parts of it are under Apache License 2.0 and the LGPL.^[2]

The Copy/Paste Detector (CPD) is an add-on to PMD that uses the Rabin–Karp string search algorithm to find duplicated code. Unlike PMD, CPD works with a broader range of languages including Java, JavaServer Pages (JSP), C, C++, Fortran, PHP, and C# code.

PMD has plugins for JDeveloper, Eclipse, jEdit, JBuilder, Omnicore's CodeGuide, NetBeans/Sun Studio, IntelliJ IDEA, TextPad, Maven, Ant, Gradle, Gel, JCreator, Hudson, Jenkins, SonarQube, Visual Studio Code and Emacs.^[5] There is also a CLI version.

• List of tools for static code analysis
• SonarQube

• Rutar, Almazan, Foster (2004), "A Comparison of Bug Finding Tools for Java". ISSRE '04 Proceedings of the 15th International Symposium on Software Reliability Engineering, IEEE, doi:10.1109/ISSRE.2004.1

• Official website
• PMD on GitHub
• PMD on SourceForge
• CPD on SourceForge.net.
• Book: "PMD Applied" Written by the lead developer, Tom Copeland ([1]).
• PMD and CPD in Maven