dawnscanner
Reek
| dawnscanner | Reek | |
|---|---|---|
| 2 | 6 | |
| 731 | 3,980 | |
| - | - | |
| 4.6 | 8.1 | |
| 2 months ago | 29 days ago | |
| Ruby | Ruby | |
| MIT License | MIT License |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
dawnscanner
-
Security Risks On Rails: Misconfiguration and Unsafe Integrations
Other useful gems you may take a look at are dawnscanner, reek, and hakiri_toolbelt.
-
Rails application boilerplate for fast MVP development
test and add dawnscanner
Reek
-
First commits in a Ruby on Rails app
Rubycritic uses reek under the hood so I added a reek config files at .reek.yml with the following content:
-
Code Reviewing a Ruby on Rails application.
Reek is a code smell detection tool for Ruby that helps identify potential design issues. It analyzes your codebase and provides feedback on areas that might benefit from refactoring or improvement. Here's an overview of what Reek is and how to use it:
-
Improve Code in Your Ruby Application with RubyCritic
$ reek app/controllers/erp/orders_controller.rb Inspecting 1 file(s): S app/controllers/erp/orders_controller.rb -- 1 warning: [91]:UncommunicativeVariableName: Erp::OrdersController#create has the variable name 'e' [https://github.com/troessner/reek/blob/v6.1.1/docs/Uncommunicative-Variable-Name.md]
-
Gems that can identify churn, complexity, duplication and smells.
reek
-
Security Risks On Rails: Misconfiguration and Unsafe Integrations
Other useful gems you may take a look at are dawnscanner, reek, and hakiri_toolbelt.
-
The best way to review my code for code smells?
Beside RuboCop, I found reek very useful. https://github.com/troessner/reek
What are some alternatives?
Brakeman - A static analysis security vulnerability scanner for Ruby on Rails applications
Rubocop - A Ruby static code analyzer and formatter, based on the community Ruby style guide. [Moved to: https://github.com/rubocop/rubocop]
Portus - Authorization service and frontend for Docker registry (v2)
Flay - Flay analyzes code for structural similarities. Differences in literal values, variable, class, method names, whitespace, programming style, braces vs do/end, etc are all ignored.
Pronto - Quick automated code review of your changes
rails_best_practices - a code metric tool for rails projects
bundler-audit - Patch-level verification for Bundler
Rubycritic - A Ruby code quality reporter
railsgoat - A vulnerable version of Rails that follows the OWASP Top 10
Flog - Flog reports the most tortured code in an easy to read pain report. The higher the score, the more pain the code is in.
Devise - Flexible authentication solution for Rails with Warden.