# spotbugs を Homebrew, zypper, scoop でインストール

spotbugs のインストール経路、実行ファイル、メタデータ、AI エージェント向けセキュリティノートを確認します。

## インストール

```sh
sudo av install brew:spotbugs
```

追加のインストールコマンド:

### macOS

- Homebrew (100%):

```sh
brew install spotbugs
```

  証拠: local Homebrew formula metadata

### Linux

- zypper (92%):

```sh
sudo zypper install spotbugs
```

  証拠: openSUSE Tumbleweed package metadata: spotbugs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst

### Windows

- Scoop (92%):

```sh
scoop install main/spotbugs
```

  証拠: Scoop official bucket manifest trees: bucket/spotbugs.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1

## パッケージ情報

- **パッケージキー:** brew:spotbugs
- **パッケージマネージャ:** Homebrew
- **バージョン:** 4.10.3
- **ソース概要:** Tool for Java static analysis (FindBugs's successor)
- **ホームページ:** <https://spotbugs.github.io/>
- **リポジトリ:** <https://github.com/spotbugs/spotbugs>
- **最終更新:** 2026-07-13T04:36:23Z
- **生成日時:** 2026-08-03T19:37:03+00:00

## 実行可能ファイル

- spotbugs (エイリアス)

## インストール挙動

- Bottle: 利用不可

## バージョンと鮮度

- ページ生成日: 2026-08-03
- マネージャ版: 4.10.3
## プロジェクトの歴史と使われ方

SpotBugs is the community continuation of FindBugs, providing Java bytecode static analysis through a standalone tool, CLI, GUI, and build-tool integrations.

### プロジェクトの歴史

The official homepage states that SpotBugs is a fork of the now-abandoned FindBugs project and carries on from where it left off with community support. Its GitHub repository was created in 2016, and the official manual copyright line also begins in 2016.

### 採用の歴史

SpotBugs is used both directly and through Java build ecosystems. The official homepage lists standalone use plus Ant, Maven, Gradle, and Eclipse integrations, while the input records Homebrew and Scoop package-manager entries for installing the command-line distribution.

### 使われ方

The manual describes GUI and command-line interfaces. On Unix-like systems, users can run the wrapper script from $SPOTBUGS_HOME/bin, invoke the jar directly, or put the bin directory in PATH and run `spotbugs`.

### パッケージ好きにとっての重要性

Package nerds care about SpotBugs because it turns a Java static-analysis distribution into a repeatable CLI install with a predictable wrapper, Java runtime requirement, plugin support, and build-system integration. It also represents the package-manager handoff from an abandoned predecessor to a maintained successor.

### タイムライン

- 2016: GitHub repository created and manual copyright period begins.
- 2016 onward: Project continues FindBugs under the SpotBugs name.
- Current: Official manual documents SpotBugs 4.10.2.

### Related projects

- SpotBugs is directly related to FindBugs as its successor. The official homepage also names fb-contrib and Find Security Bugs as popular plugins.

### ソース

- <https://api.github.com/repos/spotbugs/spotbugs: official repository metadata including creation date.>
- <https://spotbugs.github.io/: official homepage, FindBugs successor statement, integrations, plugins, and Java requirement.>
- <https://spotbugs.readthedocs.io/en/latest/introduction.html: official manual introduction and platform/runtime requirements.>
- <https://spotbugs.readthedocs.io/en/latest/running.html: official CLI and wrapper-script usage.>
- input.source_facts.package-manager: Homebrew and Scoop package-manager presence.


## セキュリティノート

narrow executable package without higher-risk signals.

- **Geiger リスク:** グリーン / 低
- narrow executable package without higher-risk signals

## 他のパッケージマネージャ記録

- zypper - spotbugs - 4.9.8-1.3: normalized package name match | openSUSE Tumbleweed package metadata: spotbugs from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | A tool for static analysis to look for bugs in Java code | https://spotbugs.github.io/
- zypper - spotbugs-annotations - 4.9.8-1.3: normalized package name match | openSUSE Tumbleweed package metadata: spotbugs-annotations from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Annotations the SpotBugs tool supports | https://spotbugs.github.io/
- zypper - spotbugs-ant - 4.9.8-1.3: normalized package name match | openSUSE Tumbleweed package metadata: spotbugs-ant from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | Ant task for spotbugs | https://spotbugs.github.io/
- zypper - spotbugs-javadoc - 4.9.8-1.3: normalized package name match | openSUSE Tumbleweed package metadata: spotbugs-javadoc from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst | API documentation for spotbugs | https://spotbugs.github.io/
- Scoop - main/spotbugs: normalized package name match | Scoop official bucket manifest trees: bucket/spotbugs.json from https://api.github.com/repos/ScoopInstaller/Main/git/trees/master?recursive=1


## Combined YAML source

View the package source record on GitHub. [combined/spotbugs.yml](https://github.com/mxcl/pkgdb/blob/main/combined/spotbugs.yml)


## ソース

- pkg.so package database
- Geiger risk classifier
- curated package history
- pkgdb category and tag curation
- external package-manager database matches
- cross-ecosystem install command graph