Most of the static code analysis tools I've used over the years have shown a large amount of "noise" complaining about stylistic issues and a small amount of "value" detecting bugs in the code. This tool is different! The detected bugs make up the bulk of its reports.
I've used findbugs many different times and continue to be impressed with the accuracy of its assessments. It seems that the common mistakes it detects in the Java byte code are also common mistakes made by the programmers on my team, and we benefit by its analysis.
The git client plugin provides the API interface to command line git and JGit implementations in Jenkins. Unit tests cover approximately 60% of the branches. Code is MIT licensed, with a long history.