[cryptos]

PMD and Sonar are not that good in detecting possible NullPointerExceptions. You would need something like the Checker Framework additionally.

The (not) nullability story is much better in Kotlin.

[pjmlp]

Only if one lives in a pure Kotlin world.