{"id":"https://openalex.org/W7133349064","doi":"https://doi.org/10.48550/arxiv.2603.00821","title":"Taking a Closer Look at Warnings Generated by PMD and SonarQube, their Rules and Compliance to Established Coding Standards","display_name":"Taking a Closer Look at Warnings Generated by PMD and SonarQube, their Rules and Compliance to Established Coding Standards","publication_year":2026,"publication_date":"2026-02-28","ids":{"openalex":"https://openalex.org/W7133349064","doi":"https://doi.org/10.48550/arxiv.2603.00821"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.00821","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.00821","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.00821","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5094350799","display_name":"Lakmal Deshapriya","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Deshapriya, Lakmal","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011391821","display_name":"Sherlock A. Licorish","orcid":"https://orcid.org/0000-0001-7318-2421"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Licorish, Sherlock A.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5050029919","display_name":"Brendon J. Woodford","orcid":"https://orcid.org/0000-0001-5202-9700"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Woodford, Brendon J.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9372000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10260","display_name":"Software Engineering Research","score":0.9372000098228455,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10430","display_name":"Software Engineering Techniques and Practices","score":0.01590000092983246,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10743","display_name":"Software Testing and Debugging Techniques","score":0.00559999980032444,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.7355999946594238},{"id":"https://openalex.org/keywords/coding","display_name":"Coding (social sciences)","score":0.7278000116348267},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4787999987602234},{"id":"https://openalex.org/keywords/source-code","display_name":"Source code","score":0.45500001311302185},{"id":"https://openalex.org/keywords/code-review","display_name":"Code review","score":0.4471000134944916},{"id":"https://openalex.org/keywords/secure-coding","display_name":"Secure coding","score":0.3995000123977661},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.38989999890327454},{"id":"https://openalex.org/keywords/codebase","display_name":"Codebase","score":0.37459999322891235}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7365000247955322},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.7355999946594238},{"id":"https://openalex.org/C179518139","wikidata":"https://www.wikidata.org/wiki/Q5140297","display_name":"Coding (social sciences)","level":2,"score":0.7278000116348267},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4787999987602234},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.45500001311302185},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4499000012874603},{"id":"https://openalex.org/C150292731","wikidata":"https://www.wikidata.org/wiki/Q1342704","display_name":"Code review","level":5,"score":0.4471000134944916},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4059999883174896},{"id":"https://openalex.org/C22680326","wikidata":"https://www.wikidata.org/wiki/Q7444867","display_name":"Secure coding","level":5,"score":0.3995000123977661},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.38989999890327454},{"id":"https://openalex.org/C51929080","wikidata":"https://www.wikidata.org/wiki/Q2425187","display_name":"Codebase","level":3,"score":0.37459999322891235},{"id":"https://openalex.org/C2989486834","wikidata":"https://www.wikidata.org/wiki/Q3808900","display_name":"True positive rate","level":2,"score":0.31290000677108765},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.31049999594688416},{"id":"https://openalex.org/C137287247","wikidata":"https://www.wikidata.org/wiki/Q1329550","display_name":"Static program analysis","level":4,"score":0.3021000027656555},{"id":"https://openalex.org/C112789634","wikidata":"https://www.wikidata.org/wiki/Q18207010","display_name":"False positives and false negatives","level":3,"score":0.2987000048160553},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.2809000015258789},{"id":"https://openalex.org/C199519371","wikidata":"https://www.wikidata.org/wiki/Q942695","display_name":"Source lines of code","level":3,"score":0.26969999074935913},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.25519999861717224},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.2513999938964844},{"id":"https://openalex.org/C85961473","wikidata":"https://www.wikidata.org/wiki/Q1457387","display_name":"Line code","level":4,"score":0.25029999017715454}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.00821","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.00821","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.00821","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.00821","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Context:":[0],"Static":[1],"code":[2,20,111,122],"analysis":[3],"(SCA)":[4],"tools":[5,33,132,147,221,240],"play":[6],"a":[7,188],"vital":[8],"role":[9],"in":[10,34,62,72,121,126,230],"software":[11],"development,":[12],"reducing":[13],"the":[14,31,35,64,92,146,161,212,227,245],"cost":[15],"and":[16,25,60,75,102,115,124,134,171,176,222,241],"time":[17],"required":[18],"for":[19,30,44,169],"reviews.":[21],"However,":[22,82],"high":[23],"false-positive":[24,128,142,213],"false-negative":[26],"rates":[27],"are":[28,55,97,164],"reported":[29],"best":[32],"community.":[36],"Accordingly,":[37],"studies":[38,84],"often":[39],"aim":[40],"to":[41,49,57,99,105,118,159,166,198,251],"develop":[42],"datasets":[43,54,89],"learning":[45,249],"SCA":[46,174,190],"warning":[47],"patterns":[48],"reduce":[50,211],"false":[51,73,100,193],"results.":[52],"These":[53],"meant":[56],"possess":[58],"high-quality":[59],"high-volume":[61],"covering":[63],"full":[65],"range":[66],"of":[67,94,247],"faults/rules":[68],"that":[69,96,163,186,206],"typically":[70],"result":[71],"warnings":[74,129],"be":[76],"compliant":[77],"with":[78],"established":[79,151,177,208,223,229,242],"coding":[80,106,152],"standards.":[81,107,153,178,224],"existing":[83],"have":[85],"not":[86],"utilised":[87],"such":[88],"or":[90],"identified":[91],"breadth":[93],"rules":[95,162,175,191,205],"prone":[98,165],"positives":[101],"their":[103],"compliance":[104],"Objectives:":[108],"We":[109],"analysed":[110],"from":[112,130,145,196],"Stack":[113],"Overflow":[114],"Apache":[116],"Tomcat":[117],"capture":[119],"variations":[120],"length":[123],"style":[125],"detecting":[127],"best-performing":[131],"PMD":[133],"SonarQube,":[135],"addressing":[136],"this":[137,231],"gap.":[138],"Method:":[139],"In":[140],"deriving":[141],"warnings,":[143],"outcomes":[144],"were":[148,156],"labelled":[149],"using":[150],"Deeper":[154],"analyses":[155],"then":[157],"conducted":[158],"identify":[160],"false-positives,":[167],"reasons":[168],"these,":[170],"agreement/gaps":[172],"between":[173,220,239],"Results:":[179],"Among":[180],"our":[181,216],"main":[182],"outcomes,":[183],"we":[184,233],"observe":[185],"only":[187],"few":[189],"generate":[192],"positives,":[194],"ranging":[195],"4.64%":[197],"18.45%":[199],"across":[200],"four":[201],"datasets.":[202,254],"Additionally,":[203,215],"eliminating":[204],"contradict":[207],"standards":[209],"significantly":[210],"rate.":[214],"findings":[217],"reveal":[218],"discrepancies":[219],"Conclusion:":[225],"Given":[226],"evidence":[228],"study,":[232],"recommend":[234],"further":[235],"investigations":[236],"into":[237],"gaps":[238],"standards,":[243],"including":[244],"use":[246],"machine":[248],"approaches":[250],"annotate":[252],"larger":[253]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-04T00:00:00"}