juvix VS publications

Compare juvix vs publications and see what are their differences.

juvix

Juvix empowers developers to write code in a high-level, functional language, compile it to gas-efficient output VM instructions, and formally verify the safety of their contracts prior to deployment and execution. (by anoma)
Our great sponsors
  • WorkOS - The modern identity platform for B2B SaaS
  • InfluxDB - Power Real-Time Data Analytics at Scale
  • SaaSHub - Software Alternatives and Reviews
juvix publications
7 51
300 1,297
- 2.1%
9.5 8.7
almost 2 years ago 10 days ago
Haskell Python
GNU General Public License v3.0 only Creative Commons Attribution Share Alike 4.0
The number of mentions indicates the total number of mentions that we've tracked plus the number of user suggested alternatives.
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.

juvix

Posts with mentions or reviews of juvix. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2022-10-03.
  • Ask HN: Who is hiring? (October 2022)
    13 projects | news.ycombinator.com | 3 Oct 2022
    Heliax | Multiple roles | REMOTE (+-2 hours from CEST ideal) | Full Time | https://heliax.dev/jobs#all-jobs

    Heliax is a public goods lab which was built on years of pioneering experience across distributed systems, programming language theory, and zero-knowledge cryptography. All our work is open-source. Examples of some of our projects are Namada (https://github.com/anoma/namada), a sovereign proof-of-stake blockchain; Juvix (https://github.com/anoma/juvix), an experimental programming language; and Taiga (https://github.com/anoma/taiga), a framework for generalized shielded state transitions.

    We are currently actively hiring for a number of positions, most notably Senior Rust Engineers, Senior Full Stack Engineers, and a Protocol Security Lead.

    For the Senior Rust Engineer position, we are looking for experienced Rust developers that are interested in applying novel research to create high-quality open-source technology and solve outstanding problems in the blockchain space. You'll be working on distributed ledger technology implemented in Rust, all the way up and down the stack from the P2P layer to consensus algorithms, smart contract systems, proof-of-stake incentive mechanisms, privacy-enhancing cryptographic components, and on-chain governance procedures.

    For the Senior Full Stack Engineer position, we are looking for either web developers with experience using TypeScript and other modern web frameworks or software developers who have experience with Rust. Some representative examples of features you’ll be working on in this role are: adding support for Ledger hardware wallet connectivity, support for generation and use of file-based keys, generation of shielded transactions using cryptographic libraries, display of any digital asset (including NFTs) and associated transaction history, and on-chain management of staking and governance. It's a plus if you've previously worked with WebAssembly.

    For the Protocol Security Lead, you'll be responsible for breaking protocols both in theory and practice in and outside the company, and assembling a team to help them do so. You'll receive a high degree of latitude and autonomy to prioritize tasks and search for the weakest links in complex systems in order to break them. The rough structure could be compared to Google Project Zero, but with a focus on cryptographic protocols & implementations instead of web technology writ large.

  • Ask HN: How to get a job as a compiler engineer?
    7 projects | news.ycombinator.com | 25 Aug 2022
    > What are the companies that do exciting stuff in compilers?

    Some companies solve problems that have a larger component of parsing and evaluating things.

    One example is Hasura's SQL-to-GraphQL layer: https://hasura.io/

    Another example is GitHub's CodeQL: https://github.com/github/codeql

    A third example -- I forget the name of the company -- parses Counter-Strike games real-time and restructures this data for better analytical introspection, e.g. for betting, time-scrollable replay, 2D rendering, etc. There appears to be a lot of hard-earned going from a stream of events monkey-patched over two decades, to a complete model of a game (who's on what team, who is dead, what round is this, etc.)

    Microsoft does a lot of interesting compiler-related stuff, too, of course.

    Then there's blockchain: A lot of programming-language enthusiasts have been employed to write VMs and DSLs to express safe application-level environments. An example is Anoma's Juvix: https://github.com/anoma/juvix

    A job I was looking at involved building a more programmatic interface to some legacy SCADA systems, i.e. make old factory monitoring systems interoperate via a DSL. The idea, I think, is to transform and manage the configuration files from a dynamic GUI system.

    tl;dr: If your main tool is a compiler, there are compiler problems everywhere.

  • Missing line in a smart contract leads to $10M hack
    3 projects | news.ycombinator.com | 16 May 2021
    https://juvix.org/ is looking rather nice but is still beta.
    3 projects | news.ycombinator.com | 16 May 2021
    I dont know how hard it would be to port it to other platforms. Different Virtual machine.

    Tezos uses a human readable stack based language as a low level represenation that is suited for formal proofs: https://tezos.gitlab.io/008/michelson.html

    If archetype depends on that then its going to be hard to port but i dont think it does.

    Another interesting project in development is https://juvix.org/ which targets more backends beside michelson like llvm and wasm. Might run on eth2/Ewasm.

    There are also blockchain specific features like: https://medium.com/tqtezos/tickets-on-tezos-part-1-a7cad8cc7...

  • Why would someone build on Tezos rather than Solana?
    2 projects | /r/tezos | 19 Apr 2021
    Rust is very nice and might be a good fit for smart contracts tough i am not sure what you really gain over Haskell. In Tezos you have a more developed ecosystem and can code in Python, Ligo, Archetype, Haskell and in the future Juvix. You also have a human readable low level (assembly like) representation in Michelson that you can do optimizations and/or run formal proofs with Coq. Smart contracts are a very very special beast and i am somewhat sceptical about developing them in a general purpose language vs a domain/smart contract specific one in the long run (but i could be wrong here).
  • ELI5 This “superior tech” Tezos has
    5 projects | /r/tezos | 29 Mar 2021
    and in the future: https://juvix.org/ (This stuff is just ridiculously advanced)

publications

Posts with mentions or reviews of publications. We have used some of these posts to build our list of alternatives and similar projects. The last one was on 2024-01-14.
  • Skiff: Various Privacy Failures
    4 projects | news.ycombinator.com | 14 Jan 2024
    Disagree, their reputation is tied to their audit quality.

    But I'm pretty sure in this case the scope was bad. Like they coukd have had audits on "Do I use OpenSSL well?" and then misrepresent that all their privacy claims were audited.

    Now it seems like Skiff conveniently didn't allow Trail of Bits to publish their reports, they are usually here: https://github.com/trailofbits/publications/tree/master/revi...

    Disclaimer, I have used Trail of Bits service in the past (and 2 other auditors for an security campaign on a blockchain, cryptography + networking product).

  • Thoughts on Skiff? What do you like? What would you want to see improve?
    2 projects | /r/privacy | 3 Jul 2023
    Audits are mentioned on the Trail of Bits website https://github.com/trailofbits/publications and the Skiff one https://skiff.com/transparency. Skiff has been externally audited 4 times.
  • SimpleX Chat: private and secure messenger without any user IDs (not even random)
    6 projects | /r/privacy | 28 May 2023
    Here's the URL https://github.com/trailofbits/publications/blob/master/reviews/SimpleXChat.pdf It was in the article I have already linked.
  • Solidity digest fortnightly / 17-30 apr 2023
    3 projects | /r/solidity | 30 Apr 2023
    MYSO Finance Security Assesment by Trail of Bits
  • Audit Firms Ranking
    3 projects | /r/ethdev | 28 Apr 2023
    Trail of Bits
  • Transparency at Skiff
    3 projects | /r/Skiff | 25 Apr 2023
    Hi! I'm Skiff's CEO. We've had 3 security audits, including 2 from Trail of Bits - one of the best security auditing firms in the world https://github.com/trailofbits/publications. Skiff Mail is also open-source: https://github.com/skiff-org/skiff-mail as is our whitepaper https://skiff.com/whitepaper We've also been in the news quite a bit: https://www.theverge.com/2022/5/17/23075804/skiff-mail-email-privacy, https://www.wsj.com/articles/encryption-bans-what-is-this-russia-hacking-online-privacy-security-data-signal-whatsapp-emails-protection-11675436242 (I wrote this with our team!), https://techcrunch.com/2023/01/30/russia-skiff-block/, and more, even though we're only a year old. We collect no personally identifying information - not even IP addresses used - no backup emails, phones, etc. - no advertising, and we end-to-end encrypt BOTH email subject + body and don't have any metadata (time sent/received an exception). What can we do to share more of this with more people? We're a younger company but it's so important this is made public.
  • Skiff Apps
    3 projects | /r/PrivacyGuides | 25 Apr 2023
    Hi! I'm Skiff's CEO. We've had 3 security audits, including 2 from Trail of Bits - likely the best security auditing firm in the world https://github.com/trailofbits/publications. Skiff Mail is also open-source: https://github.com/skiff-org/skiff-mail as is our whitepaper https://skiff.com/whitepaper
  • DeFi Exchange Uniswap Launches Uniswap Mobile Wallet
    2 projects | /r/CryptoCurrency | 14 Apr 2023
    Our wallet was audited by Trail of Bits and the code is open source https://github.com/trailofbits/publications/blob/master/reviews/UniswapMobileWallet-securityreview.pdf
  • Ask HN: How can I get into cyber security research?
    3 projects | news.ycombinator.com | 29 Jan 2023
    "Cybersecurity research" is a very large domain, so it's hard to offer a wholly encompassing answer here! The company I work for[1] does a great deal of program analysis research, primarily in and around the LLVM ecosystem. Other companies/groups in our domain(s) include Galois, Inria, and GrammaTech.

    In terms of working in our domain: we frequently find it difficult to hire for pre-existing compilers or program analysis skills (it's a small community!), so we generally long for strong engineers with security/low-level fundamentals who don't mind making a pivot.

    As for how the job is: I personally find it very fulfilling, but it definitely contains a degree of uncertainty (particularly when doing government-funded research) that ordinary SWEs/SREs may not be used to. I've noticed that it takes new hires a decent amount of time to acclimate and become comfortable with the idea of research engineering, meaning engineering where we expect less than 100% of all exploratory avenues to have productive outcomes. This can be a large culture shock compared to typical engineering, where tasking is defined primarily by business requirements that don't contain a large degree of uncertainty or ambiguity in terms of implementation approach.

    [1]: https://www.trailofbits.com/

    3 projects | news.ycombinator.com | 29 Jan 2023
    Trail of Bits does this kind of work (https://www.trailofbits.com)!

    Tbh there is a much larger market for application of existing technology (e.g., pentests) than development of new technology (e.g., DARPA programs and the 1% of tech firms that need something new). There are a handful of others, but the market doesn't support dozens of other firms like Trail of Bits. There is some innovation that happens in Series A and B security startups but IMHO that quickly gives way to pressures of building an enterprise sales team.

What are some alternatives?

When comparing juvix and publications you can also consider the following projects:

plutus - The Plutus language implementation and tools

slither - Static Analyzer for Solidity and Vyper

coq-tezos-of-ocaml

manticore - Symbolic execution tool

echidna - Ethereum smart contract fuzzer

mi-cho-coq

tzip

morley

linear-base - Standard library for linear types in Haskell.

verified-smart-contra

salmonella - Wrecking sandwich traders for fun and profit

codeql - CodeQL: the libraries and queries that power security researchers around the world, as well as code scanning in GitHub Advanced Security