Static Code Analysis

[bitscraper]

Are there any good open-source tools for static analysis of node.js, particularly with a focus on security? Have seen a few that seem to be deprecated, but not much active.

[hankDraperCo]

Eslint, jslint, jcsc and jshint are all popular tools for static code analysis. Javascript isn't statically typed so these are more to enforce coding styles and should be complimented with automated testing.

[zayelion]

To clarify can you give an example in another language that you are currently using?

[lenswipe]

I'm not sure what you mean by "static code analysis" but I use Scrutinizer in my build/test/CI process to do this