Hacker News with Generative AI: Static Analysis

Globstar: Open-source static analysis toolkit (github.com/DeepSourceCorp)
Globstar is an open-source static analysis toolkit that enables developers and security engineers to write code analysis checkers and run them using a single, portable binary.

Static Analysis, Open Source, Software, Security, Programming

10 points by vortex_ape 17 days ago | 0 comments

Show HN: A static scanner for LLM app code (github.com/kereva-dev)
A static analysis tool for scanning Python codebases that use Large Language Models (LLMs) to detect issues that could cause security or performance problems such as hallucination or bias.

Static Analysis, Python, Security, Generative AI

6 points by amarble 39 days ago | 1 comments

Show HN: Globstar – Open-source static analysis toolkit (ycombinator.com)
Hey HN! We’re Jai and Sanket, co-founders of DeepSource (YC W20). We're open-sourcing Globstar (https://github.com/DeepSourceCorp/globstar), a static analysis toolkit that lets you easily write and run custom code quality and security checkers in YAML [1] or Go [2].

Open Source, Static Analysis, Security, Programming, Tools

103 points by sanketsaurav 56 days ago | 22 comments

Clang Static Analyzer and the Z3 constraint solver (2022) (cambus.net)
As far as static analyzers are concerned, one of the most important point to consider is filtering out false positives as much as possible, in order for the reports to be actionable.

Static Analysis, Programming Tools, Software Development, Constraint Solving

107 points by davikr 62 days ago | 7 comments

Ways to generate SSA (bernsteinbear.com)
Static Single Assignment is a program representation where each “variable” (though this term can be misleading) is assigned exactly once. Mostly the variables aren’t variables at all, but instead names for values—for expressions. SSA is used a lot in compilers. I’m making this page to catalog the papers I have found interesting and leave a couple of comments on them.

Programming, Compilers, Static Analysis

110 points by g0xA52A2A 74 days ago | 35 comments

"We're building a new static type checker for Python" (twitter.com)

Python, Static Analysis, Programming Languages, Software Development

356 points by shlomo_z 86 days ago | 190 comments

Diman: a Rust library for checking units of measure at compile time (github.com/Tehforsch)
Diman is a library for zero-cost compile time unit checking.

Rust, Programming Languages, Static Analysis, Unit Testing, Libraries

9 points by fanf2 90 days ago | 0 comments

Ruff: Python linter and code formatter written in Rust (github.com/astral-sh)

Python, Code Formatting, Static Analysis, Rust

200 points by modinfo 95 days ago | 150 comments

What would it take to add refinement types to Rust? (yoric.github.io)
A few years ago, on a whim, I wrote YAIOUOM. YAOIOUM was a static analyzer for Rust that checked that the code was using units of measures correctly, e.g. a distance in meters is not a distance in centimeters, dividing meters by seconds gave you a value in m / s (aka m * s^-1).

Rust, Programming Languages, Static Analysis, Type Systems

136 points by Yoric 124 days ago | 94 comments

What would it take to add refinement types to Rust? (yoric.github.io)
A few years ago, on a whim, I wrote YAIOUOM. YAOIOUM was a static analyzer for Rust that checked that the code was using units of measures correctly, e.g. a distance in meters is not a distance in centimeters, dividing meters by seconds gave you a value in m / s (aka m * s^-1).

Rust, Programming Languages, Static Analysis, Type Systems

26 points by leosarev 124 days ago | 3 comments

PHPStan 2.0 Released for Leading PHP Static Analyzer (phoronix.com)
PHPStan 2.0 is out today as what is the best open-source static analyzer for the PHP programming language.

PHP, Programming Languages, Static Analysis, Open Source, Software

4 points by mikece 166 days ago | 0 comments

Jet.jl: static type checker with type inference for Julia (github.com/aviatesk)
JET employs Julia's type inference system to detect potential bugs and type instabilities.

Programming, Julia, Static Analysis, Type Inference, Tools

3 points by fanf2 189 days ago | 0 comments

Zod: TypeScript-first schema validation with static type inference (zod.dev)

TypeScript, Schema Validation, Static Analysis, Development Tools

242 points by tosh 201 days ago | 197 comments

Abstract Debuggers: Exploring Program Behaviors Using Static Analysis Results [pdf] (patricklam.ca)

Debugging, Static Analysis, Software Engineering, Computer Science, Research

34 points by matt_d 233 days ago | 1 comments

Abstract Debuggers: Exploring Program Behaviors Using Static Analysis Results [pdf] (patricklam.ca)