Hacker Newsnew | past | comments | ask | show | jobs | submitlogin
Node.jsScan: A semantic aware static code analysis tool for Node.js applications (github.com/ajinabraham)
27 points by geeklord on June 12, 2020 | hide | past | favorite | 4 comments


A quick summary of what exactly this scans for at the top of the README would be nice.

From the screenshots at the bottom, it looks like mainly SQL injection and outdated dependencies?


Probably JSON injection too. You can handle this in middleware, but I suspect lot of people don't.


https://github.com/ajinabraham/njsscan/blob/master/njsscan/r...

Does this mean that if I use single quotes or add whitespace inside the parentheses the vulnerability will not be detected?


Static analysis software is quite valuable if you can successfully sell it.

https://github.blog/2019-09-18-github-welcomes-semmle/




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: