La brecha que resuelve

The real EI_EXPOSE_REP bug class (SpotBugs' own name for it) -- CWE-374/375. SpotBugs is bytecode-based, a CI/build-step tool, not an inline IDE inspection, and its own heuristic only checks the getter's SHAPE -- it never verifies a caller actually mutates the returned reference. No dedicated Marketplace plugin found that verifies real exploitation.

Datos y precio

Categoría: Calidad de código
Precio: Gratis
Plataforma: IntelliJ-family
Primera publicación: —
ID en Marketplace: #34073
Repositorio: mutable-state-leak-companion
Crecimiento: ▲ +3800.0% desde el 2026-09-05 (1→39)

Plugins relacionados

Todos los plugins de calidad de código

Freemium

Refactor Simulator

Refactoring Tools

Preview every refactoring before committing it. Simulates a rename in an isolated, in-memory sandbox (using IntelliJ's own PSI, Find Usages, and refactoring processors, never a custom engine) and shows a full impact report, deterministic validation, and a native side-by-side diff before anything touches a real file.

180 descargasDetalles

Gratis

Highlight Companion

Code Complexity

A cognitive-complexity gutter icon for Java and Kotlin methods/functions: a colored badge with the real number, computed with SonarSource's documented Cognitive Complexity algorithm, never blocking the UI thread.

115 descargasDetalles

Gratis

Error Lens Companion

Inline Diagnostics

Shows errors and warnings inline, at the end of the line that has them, instead of only as a gutter icon or a squiggly underline you have to hover to read. One hint per line (most severe diagnostic wins) so it never turns into unreadable clutter.

99 descargasDetalles

Gratis

Feature Flag Reference Companion

Code Quality / Feature Flags

Gutter icon next to every recognized feature-flag-check call's key literal in Java/Kotlin code (isEnabled("checkout_v2"), variation("checkout_v2", false), and similar), showing how many times that exact key is referenced anywhere else in the open project: helps find orphaned flags (dead code left behind after a rollout completed) without connecting to any provider. 100

90 descargasDetalles

¿Necesitas una herramienta así hecha para tu código?Reglas de análisis estático a medida, integración con CI/CD, distribución privada de plugins y auditorías de rendimiento para plugins IntelliJ.

Trabaja con Joel

Descargas y estrellas al 2026-10-18, actualizadas dos veces al día desde las API de JetBrains Marketplace y GitHub.