Abstract:In the field of software development, the application of code quality check tools has become a key factor in improving product quality and development efficiency. While many existing tools are effective at detecting common problems in code, there are still some limitations. Firstly, these tools rely on predefined rules that may not fully encompass real-world coding challenges. Secondly, a lack of consideration of dependencies leads to failure to report violations occurring across files or modules. Third, the metrics used by these tools primarily focus on object-oriented programming, limiting their ability to assess software quality from the perspective of nationalized standards. To address these issues, this work proposes a dependency-enhanced method namely ERD-CQC for code quality detection and measurement. ERD-CQC provides 88 detection rules and 45 metrics, supplementing checking rules in categories such as Circuit Breaking, Serializable, and Security. ERD-CQC constructs an infused graph by integrating abstract syntax trees (ASTs), entities, and dependencies for violation detection. Based on the detection results, ERD-CQC provides a code quality measurement system with 4 nationalized standard dimensions for the purpose of measuring code quality from multiple perspectives. To validate the effectiveness of ERD-CQC, we manually examined 647 compliant and 528 non-compliant code snippets. ERD-CQC achieves the recall and F1 score exceeding 98%. We also collected open-source projects and closed-source projects in the real world, containing a total of 4,319 non-compliant code snippets. On this real-world benchmark, the average F1 score of ERD-CQC is 11.44% higher than the advanced tool SonarQube. Finally, we visualized the quality measurement results based on metrics and found that open-source and closed-source projects have certain patterns in metric performance. Our work will benefit developers in checking, evaluating, and monitoring their software quality comprehensively.

CodeFuse-Query: A Data-Centric Static Code Analysis System for Large-Scale Organizations

Source Code Static Analysis Technology for Vulnerability Detection Based on Data Fusion

Kakute: A Precise, Unified Information Flow Analysis System for Big-data Security.

Code Query Technology Based on Program Analysis

ISA: a Source Code Static Vulnerability Detection System Based on Data Fusion

Fusing Code Searchers

SQLfuse: Enhancing Text-to-SQL Performance through Comprehensive LLM Synergy

ERD-CQC : Enhanced Rule and Dependency Code Quality Check for Java

An Open Framework for Semantic Code Queries on Heterogeneous Repositories

VFQL: combinational static analysis as query language

BigSpa: An Efficient Interprocedural Static Analysis Engine in the Cloud

FUSE (Fusion Synthesis Engine): A Next Generation Framework for Integrated Design of Fusion Pilot Plants

Fuse: In-Situ Sensemaking Support in the Browser

F-SQL: Fuse Table Schema and Table Content for Single-Table Text2SQL Generation

Actionable Code Smell Identification with Fusion Learning of Metrics and Semantics

CoBOT: Static C/C plus plus Bug Detection in the Presence of Incomplete Code

REPOFUSE: Repository-Level Code Completion with Fused Dual Context

Towards SOA-Based Code Defect Analysis

Combining Static and Dynamic Analysis to Discover Software Vulnerabilities

AutoQuery: Automatic Construction of Dependency Queries for Code Search.

FusionQuery: On-demand Fusion Queries over Multi-source Heterogeneous Data