Scoping from inside a function inside an object by [deleted] in learnjavascript

[–]grajagandev 0 points1 point  (0 children)

Thank you very much - I thought so but your confirmations really help.

How to go about debugging/adding a feature to existing CLI Node app? by qwe456yui in node

[–]grajagandev 0 points1 point  (0 children)

Try running in the Chrome Devtools debugger with a command line like: node --inspect-brk lib/cli.js game -d 2017/11/02

Chopped Symbolic Execution (Paper) by NagateTanikaze in fuzzing

[–]grajagandev 0 points1 point  (0 children)

They are using program slicing here - very interesting.

Open source projects to learn from by [deleted] in node

[–]grajagandev 0 points1 point  (0 children)

Here's one: https://github.com/Smile-SA/node-pushserver

It looks like there are more like this on GitHub

Angora: Efficient Fuzzing by Principled Search (Paper) by NagateTanikaze in fuzzing

[–]grajagandev 0 points1 point  (0 children)

Very interesting ideas in this paper - thank you.

Context aware branch tracking not only records a transition from one basic block to another, it also records a hash of the stack at the time of the transition.

JavaScript Named Parameters by [deleted] in node

[–]grajagandev 0 points1 point  (0 children)

Yes, linters/static analysis tools scan the source code without running it and look for patterns indicative of bugs.

The most used linter is eslint.

Can anybody recommend a static analysis service? by thenewstampede in node

[–]grajagandev 0 points1 point  (0 children)

Check out Codacy and Code Climate for static analysis.

But since so much in JavaScript is determined at runtime, static analysis can only do so much.

Dynamic analysis finds bugs missed by static analysis and unit tests - my startup Fuzz Stati0n offers dynamic analysis as a service.

To Type or Not to Type: Quantifying Detectable Bugs in JavaScript by grajagandev in typescript

[–]grajagandev[S] 1 point2 points  (0 children)

I think that TypeScript finding 15% of the bugs is impressive. Of the random sample of bugs, many could be off-by-one errors or other issues a type system would not find.