Essential rules according to SonarQube. Note that it is impossible to make PMD rules exactly match the SonarQube ones, but they will probably catch about 90% of violations before they get into the source control. The advantage is that PMD can be ran locally on any development setup and does not require a license.