• Top
  • New

Node.jsScan: A semantic aware static code analysis tool for Node.js applications

by geeklord on 6/12/2020, 6:29:33 PM with 4 comments
  • by danenania on 6/12/2020, 8:16:56 PM

    A quick summary of what exactly this scans for at the top of the README would be nice.

    From the screenshots at the bottom, it looks like mainly SQL injection and outdated dependencies?

  • by 29athrowaway on 6/12/2020, 8:34:53 PM

    https://github.com/ajinabraham/njsscan/blob/master/njsscan/r...

    Does this mean that if I use single quotes or add whitespace inside the parentheses the vulnerability will not be detected?

  • by narrationbox on 6/12/2020, 10:43:41 PM

    Static analysis software is quite valuable if you can successfully sell it.

    https://github.blog/2019-09-18-github-welcomes-semmle/