https://github.com/findbugsproject/findbugs
http://findbugs.sourceforge.net/
https://github.com/spotbugs/spotbugs (findbugs)
https://gradle.org/
Black Duck® software composition analysis (SCA)
https://www.synopsys.com/software-integrity/security-testing/software-composition-analysis.html
CoPilot is powered by Synopsys®'s Black Duck software composition analysis - a comprehensive SCA solution for managing security, quality, and license compliance risk
https://copilot.blackducksoftware.com/
https://github.com/blackducksoftware