FindBugs is a standard tool to perform static analysis on your code in order to detect common problems.
There is a plugin that allows it to be run as part of Maven, and fail the build if the tests don't pass.
From initial testing, there are a number of issues in DSpace, which we won't be able to fix immediately.
Proposal (and pull request) is to add a profile to the build which can be run by adding -Pfindbugs to the build. Ultimately as issues are resolved and/or annotated (annotation dependencies are included), then we can consider enabling as part of the continuous integration process.