Repo brief: uber/NullAway

Generated by RepoPilot · document generated 2026-09-16 · concise human review Evidence snapshot · analyzed 2026-09-16T23:32:26.822Z · commit dff4b58a2fe8

Verdict

Healthy — Strong maintenance signals

• Last commit 1d ago
• 14 active contributors
• MIT licensed
• CI configured
• 1 more receipt on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests

What it is

NullAway is an Error Prone plugin that performs fast, annotation-based null-pointer checking for Java code at compile time. It uses @Nullable annotations on fields, parameters, and return values to perform type-based, local flow analysis that catches most real-world NullPointerExceptions with <10% build-time overhead, bridging the gap between full null-safety (Kotlin/Swift) and no checking. Gradle monorepo: annotations/ module provides the core @Nullable, @MonotonicNonNull, @EnsuresNonNull marker annotations (JDK 11-compatible); main checker code likely in a checker/ or sibling module (not fully listed); buildSrc/ contains shared Gradle conventions…

Start here

Open these first:

• annotations/src/main/java/com/uber/nullaway/annotations/Initializer.java — Core annotation marking fields that are initialized in constructor; fundamental to NullAway's initialization tracking logic
• annotations/src/main/java/com/uber/nullaway/annotations/Nullable.java — Primary annotation for marking nullable fields/parameters; understanding this is essential for using NullAway across the…
• annotations/src/main/java/com/uber/nullaway/annotations/RequiresNonNull.java — Annotation for method preconditions; critical for flow-sensitive null checking that NullAway performs
• annotations/src/main/java/com/uber/nullaway/annotations/EnsuresNonNull.java — Annotation for method postconditions; enables NullAway to track non-null guarantees across method boundaries
• annotations/src/main/java/com/uber/nullaway/annotations/MonotonicNonNull.java — Annotation for fields that transition from null to non-null once; essential for lazy initialization patterns

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/uber/NullAway.git
cd NullAway
./gradlew build
./gradlew test

Daily commands:

This is a compiler plugin, not a server. For local development:

./gradlew build                  # Compile all modules
./gradlew test                   # Run unit tests
./gradlew jmhBenchmark           # Run JMH performance benchmarks (if applicable)
./gradlew publishToMavenLocal    # Install locally for testing in other projects

Key cautions & unknowns

• Concentrated ownership — top contributor handles 76% of recent commits
• 1. JDK 17+ required (per README): Java 11 is supported only for the annotations module (sourceCompatibility = JavaVersion.VERSION_11 in annotations/build.gradle), but the checker itself needs JDK 17+. 2.…
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.