TE
科技回声
首页24小时热榜最新最佳问答展示工作
GitHubTwitter
首页

科技回声

基于 Next.js 构建的科技新闻平台,提供全球科技新闻和讨论内容。

GitHubTwitter

首页

首页最新最佳问答展示工作

资源链接

HackerNews API原版 HackerNewsNext.js

© 2025 科技回声. 版权所有。

Node.jsScan: A semantic aware static code analysis tool for Node.js applications

27 点作者 geeklord将近 5 年前

3 条评论

danenania将近 5 年前
A quick summary of what exactly this scans for at the top of the README would be nice.<p>From the screenshots at the bottom, it looks like mainly SQL injection and outdated dependencies?
评论 #23503585 未加载
29athrowaway将近 5 年前
<a href="https:&#x2F;&#x2F;github.com&#x2F;ajinabraham&#x2F;njsscan&#x2F;blob&#x2F;master&#x2F;njsscan&#x2F;rules&#x2F;semantic_grep&#x2F;crypto_node.yaml#L5" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;ajinabraham&#x2F;njsscan&#x2F;blob&#x2F;master&#x2F;njsscan&#x2F;r...</a><p>Does this mean that if I use single quotes or add whitespace inside the parentheses the vulnerability will not be detected?
narrationbox将近 5 年前
Static analysis software is quite valuable if you can successfully sell it.<p><a href="https:&#x2F;&#x2F;github.blog&#x2F;2019-09-18-github-welcomes-semmle&#x2F;" rel="nofollow">https:&#x2F;&#x2F;github.blog&#x2F;2019-09-18-github-welcomes-semmle&#x2F;</a>