Static code analysis as a strategy for managing technical debt: a multicriteria approach and emerging trends

Abstract

The study focuses on static code analysis as a critical tool for managing and reducing technical debt in software development. It explores technical debt, a concept representing the cumulative cost of suboptimal solutions regarding software quality and security. Tools like SonarQube, PMD, and Checkstyle are analyzed, and the Analytic Hierarchy Process (AHP) method is employed to prioritize key metrics such as standard compliance, code quality, costs, and usability. Results highlight that standard compliance, like OWASP, is a top priority, followed by code quality, with costs and usability being less influential. The research underscores the importance of static analysis in early defect detection, cost reduction, and continuous software improvement.

Keywords:

Static Code Analysis, Standards Compliance, Analysis Tools, Software Quality, Evaluation Metrics.