Major Description
I think we should integrate Findbugs (http://findbugs.sourceforge.net) into our nightly test runs at http://lucene.zones.apache.org:8080/hudson/ and/or our patch process builds.
Findbugs uses static analysis to look for bugs in Java code. It is licensed under Lesser GNU Public License so the build target will need to be optional, similar to the checkstyle target.