The nice thing about FindBugs is that you can, e.g., automatically run it in a Jenkins pipeline.

Just for ad-hoc analysis in Java IntelliJ's code inspector IMO works quite well. It's also available in the community edition, so all of that code is open source: https://www.jetbrains.com/help/idea/2016.2/code-inspection.h...