undefined | Better HN

0 pointssamsk1d ago0 comments

Interesting tool, will definitely try - just curious, is there a tool (hexora checker) that ensures that hexora itself and its dependencies are not compromised ? And of course if there is one, I'll need another one for the hexora checker....

0 comments

f311a1d ago

There is no such tool, but you can use other static analyzers. Datadog also has one, but it's not AST-based.

hmokiguess1d ago

https://xkcd.com/2044/

j / k navigate · click thread line to collapse

0 pointssamsk1d ago0 comments

Interesting tool, will definitely try - just curious, is there a tool (hexora checker) that ensures that hexora itself and its dependencies are not compromised ? And of course if there is one, I'll need another one for the hexora checker....

0 comments

f311a1d ago

There is no such tool, but you can use other static analyzers. Datadog also has one, but it's not AST-based.

hmokiguess1d ago

https://xkcd.com/2044/

j / k navigate · click thread line to collapse