# Install spotbugs

Tool for Java static analysis (FindBugs's successor). Version 4.10.2 via Homebrew; verified 2026-06-09.

## Install

```sh
sudo av install brew:spotbugs
```

Additional install commands:

### macOS

- Homebrew (100%):

```sh
brew install spotbugs
```

  Evidence: local Homebrew formula metadata

### Windows

- Scoop (92%):

```sh
scoop install main/spotbugs
```

  Evidence: Scoop official bucket manifest trees: bucket/spotbugs.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

## Package Facts

- **Package key:** brew:spotbugs
- **Package manager:** Homebrew
- **Package manager URL:** <https://formulae.brew.sh/formula/spotbugs>
- **Version:** 4.10.2
- **Source summary:** Tool for Java static analysis (FindBugs's successor)
- **Homepage:** <https://spotbugs.github.io/>
- **Repository:** <https://github.com/spotbugs/spotbugs>
- **Upstream docs:** <https://spotbugs.readthedocs.io/en/latest/index.html>
- **License:** LGPL-2.1-or-later
- **Source archive:** <https://repo.maven.apache.org/maven2/com/github/spotbugs/spotbugs/4.10.2/spotbugs-4.10.2.tgz>
- **Last updated:** 2026-06-09T23:45:31Z
- **Generated:** 2026-06-10T07:18:26+00:00

## Executables

- spotbugs (cli)
- spotbugs (alias)

## Dependencies

- openjdk

## Install Behavior

- Post-install hook: not defined
- Bottle: available on all

## Freshness

- Page generated: 2026-06-10
- Package-manager version: 4.10.2
- Package-manager updated: 2026-06-09
- Local data status: ok
- Upstream repository: https://spotbugs.github.io/
- info: Release/tag comparison is only available for GitHub repositories.

## 安全说明

narrow executable package without higher-risk signals.

- **Geiger risk:** green / low
- narrow executable package without higher-risk signals

## Source Database Details

- **Source Database:** Homebrew formula API
- **Tap:** homebrew/core
- **Full Name:** spotbugs
- **Version Scheme:** 0
- **Revision:** 0
- **Head Version:** HEAD
- **Conflicts With:** fb-client
- **Bottle Stable Root URL:** <https://ghcr.io/v2/homebrew/core>
- **Deprecated:** no
- **Disabled:** no
- **Keg Only:** no
- **URL Keys:** head, stable

## Other Package-Manager Records

- Scoop - main/spotbugs: normalized package name match | Scoop official bucket manifest trees: bucket/spotbugs.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1


## Related Links

- [Source-control packages](https://www.automicvault.com/zh-hans/pkg/source-control-tools/) - Belongs to a source-control command family.
- [Terminal utility packages](https://www.automicvault.com/zh-hans/pkg/terminal-utilities/) - Matched terminal and command-line workflow metadata.
- [Text processing packages](https://www.automicvault.com/zh-hans/pkg/text-processing-tools/) - Matched text, document, or structured-data processing metadata.
- [Developer build packages](https://www.automicvault.com/zh-hans/pkg/developer-build-tools/) - Matched build, compiler, generator, or developer workflow metadata.
- [openjdk](https://www.automicvault.com/zh-hans/pkg/brew/openjdk/) - Runtime dependency declared by Homebrew.
- [pmd](https://www.automicvault.com/zh-hans/pkg/brew/pmd/) - Shares av.db curated category or tags: cli, code-quality, developer-tools, java, linter.
- [swiftlint](https://www.automicvault.com/zh-hans/pkg/brew/swiftlint/) - Shares av.db curated category or tags: cli, code-quality, developer-tools, linter, static-analysis.
- [eslint](https://www.automicvault.com/zh-hans/pkg/brew/eslint/) - Shares av.db curated category or tags: cli, code-quality, developer-tools, linter, static-analysis.
- [pylint](https://www.automicvault.com/zh-hans/pkg/brew/pylint/) - Shares av.db curated category or tags: cli, code-quality, developer-tools, linter, static-analysis.
- [staticcheck](https://www.automicvault.com/zh-hans/pkg/brew/staticcheck/) - Shares av.db curated category or tags: cli, code-quality, developer-tools, linter, static-analysis.
- [checkstyle](https://www.automicvault.com/zh-hans/pkg/brew/checkstyle/) - Shares av.db curated category or tags: cli, code-quality, developer-tools, java, static-analysis.
- [luacheck](https://www.automicvault.com/zh-hans/pkg/brew/luacheck/) - Shares av.db curated category or tags: cli, code-quality, developer-tools, linter, static-analysis.
- [selene](https://www.automicvault.com/zh-hans/pkg/brew/selene/) - Shares av.db curated category or tags: cli, code-quality, developer-tools, linter, static-analysis.
- [scalastyle](https://www.automicvault.com/zh-hans/pkg/brew/scalastyle/) - Local package facts share a topical domain. Shared terms: analysis, cli, code, code-quality, developer.

## Sources

- Nucleus package database
- Geiger risk classifier
- package-page enrichment
- package version freshness
- av.db category and tag curation
- package relationship graph
- external package-manager database matches
- cross-ecosystem install command graph