compare
SonarQube Community Build vs SpotBugs
The same facts for both, read from GitHub every night, and the relation a person reviewed.
| Fact | SonarQube Community Build | SpotBugs |
|---|---|---|
| Language | Java | Java |
| Licence | LGPL-3.0 | LGPL-2.1 |
| Stars | 11k | 4k |
| Latest | 26.10.0.133078 | 4.10.5 |
| Last push | 2026-10-17 | 2026-10-18 |
| Release cadence | about 32 days between releases | about 36 days between releases |
| Active contributors | 82+ commit authors on the default branch in the last 90 days | 27 commit authors on the default branch in the last 90 days |
| Flags | none | none |
How they relate
SpotBugs replaces SonarQube Community Build. Alternatives to SonarQube Community Build →
PartialBytecode analysis for Java bugs, run as a CLI or build plugin without a server.
SonarQube Community Build
- 26.10.0.1330782026-10-12See details in the community announcement, and more in the release notes.
- 26.9.0.1293882026-09-02See details in the community announcement, and more in the release notes.
- 26.8.0.1268082026-08-05See details in the community announcement, and more in the release notes.
- 26.7.0.1247712026-07-08See details in the community announcement, and more in the release notes.
- 26.6.0.1235392026-06-03See details in the community announcement, and more in the release notes.
SonarQube Community Build
unsigned The latest release, 26.10.0.133078, carries no signature GitHub could verify.
Loading the security report
SpotBugs
✓ signed The latest release, 4.10.5, carries a signature GitHub verified.
Loading the security report