pkg.soopen package index

brew / 排名 2184

使用 Homebrew, chocolatey, MacPorts, Nix 安装 pmd

查看 pmd 的安装路径、可执行文件、元数据以及面向 AI 代理工作流的安全说明。

安装命令安全说明

安装

其他安装命令

macOS

Homebrew已验证 · 100%
brew install pmd

local Homebrew formula metadata

MacPorts已验证 · 94%
sudo port install pmd

MacPorts ports tree · java/pmd/Portfile · 来源: api.github.com

Linux

Nix已验证 · 92%
nix profile install nixpkgs#pmd

nixpkgs package indexes · pkgs/by-name/pm/pmd/package.nix · 来源: api.github.com

概览

软件包摘要

Source code analyzer for Java, JavaScript, and more

命令和别名

  • pmd

历史

项目历史与用法

PMD is an extensible, multilanguage static source-code analyzer. It identifies programming flaws, style problems, suspicious constructs, and duplicated code through built-in or custom rules.

项目历史

PMD was created in 2002 to detect common problems in Java programs. Subsequent generations added more languages, extensible rules, XPath analysis, copy-paste detection, build-tool integrations, and a redesigned PMD 7 architecture.

The official support lifecycle records PMD 1.0 in November 2002, major lines 2 through 6 between 2004 and 2017, and PMD 7 in March 2024. The project generally supports only its newest major line.

采用历史

PMD expanded from a Java analyzer into an extensible multilanguage tool. Its official documentation covers command-line use, Maven, Gradle, Ant, CI systems, IDE plugins, and APIs, reflecting adoption across local development and automated builds.

使用方式

Users run `pmd check` with source paths, a ruleset, and an output format. Teams commonly place the same rulesets in build-tool or CI configuration so local and automated analysis enforce a shared policy.

PMD rules can be written in Java or as XPath expressions over a language's abstract syntax tree. CPD supplies a related workflow for locating duplicated code.

为什么软件包爱好者会关心

PMD is a classic package-manager static-analysis tool: a standalone CLI backed by a large Java distribution, built-in rulesets, XPath rules, custom Java rules, multiple report formats, and Copy/Paste Detector functionality. It predates most modern linter ecosystems and remains actively maintained.

时间线

  • 2002: PMD was created for finding common problems in Java programs.
  • 2002-11-04: PMD 1.0 was released.
  • 2017-12-15: PMD 6.0 was released.
  • 2024-03-22: PMD 7.0 was released after a major architectural overhaul.

Related projects

  • Checkstyle focuses on enforcing Java coding standards, while SpotBugs analyzes Java bytecode; both overlap with portions of PMD's source-analysis workflow.
  • Maven, Gradle, Ant, IDE plugins, and CI services provide documented integration surfaces for PMD.

安全态势

风险级别：绿色

narrow executable package without higher-risk signals.

风险分类器

绿色 风险 · 低 置信度 · appliance

原因

  • narrow executable package without higher-risk signals

信号

  • metadata:no-higher-risk-signals

安装行为

  • formula 元数据中未记录 Homebrew post-install 钩子。
  • Homebrew bottle 元数据适用于 1 个平台目标。
  • 安装时包含 1 个运行时依赖。

建议审查

在无人值守的代理使用前，请检查该工具是否读取明文凭据、写入远程状态、发布制品或调用插件。

可执行文件

已安装的可执行文件

命令类型暴露范围备注
pmdcli全局可执行文件

新鲜度

版本和新鲜度

这些信号区分页生成时间、软件包管理器活动和上游发布比较。只有存在证据 URL 和可比较版本时，才会提示版本落后。

页面生成时间2026-11-04
管理器版本7.29.0
管理器更新时间2026-10-30
本地数据OK
上游not checked
检测到的最新版本未检测到

https://github.com/pmd/pmd

安装元数据

软件包元数据

软件包键brew:pmd
版本7.29.0
软件包管理器Homebrew
软件包管理器页面https://formulae.brew.sh/formula/pmd
主页https://pmd.github.io
仓库https://github.com/pmd/pmd
上游文档https://pmd.github.io
许可证BSD-4-Clause
源码归档https://github.com/pmd/pmd/releases/download/pmd_releases%2F7.29.0/pmd-dist-7.29.0-bin.zip
最后更新2026-10-30T14:37:30Z
Pulseupdated
依赖openjdk
Bottle可用 (于 all)
Homebrew post-install未定义
服务未声明

注册表事实

源数据库详情

Source DatabaseHomebrew formula API
Taphomebrew/core
Full Namepmd
Version Scheme0
Revision0
Bottle Stable Root URLhttps://ghcr.io/v2/homebrew/core
Deprecatedno
Disabledno
Keg Onlyno
URL Keys
  • stable

源数据库匹配

其他软件包管理器记录

匹配项来自外部软件包管理器索引，并与本地 Automic Vault 软件包链接分开显示。

Nix95%

pmd

nix profile install nixpkgs#pmd
  • normalized package name match
  • 匹配方式：Pmd
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/pm/pmd/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
MacPorts95%

pmd

sudo port install pmd
  • normalized package name match
  • 匹配方式：Pmd
MacPorts ports tree · api.github.com · MacPorts ports tree: java/pmd/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1
Chocolatey95%

pmd

choco install pmd
  • normalized package name match
  • 匹配方式：Pmd
Chocolatey community package catalog · community.chocolatey.org · Chocolatey community package catalog: pmd from https://community.chocolatey.org/api/v2/Packages?$filter=IsLatestVersion&$select=Id&$top=1000&$skiptoken='11','pebear'

软件包图谱

链接来自本地软件包关系图、补充数据、依赖边、生态匹配和软件包 hub 归属。

来源线索

由仓库数据生成

此页面由 av-web 从 scripts/generate-pkg-sqlite.py 生成的私有软件包 SQLite 工件提供。

使用的来源

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • package relationship graph
  • package version freshness
  • package-page enrichment
  • pkg.so package database
  • pkgdb category and tag curation