A technical tale of NodeSecure - Chapter 2

1. js-x-ray

   1 8 242 7.6 JavaScript

   JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.

   

   I'm back at writing for a new technical article on NodeSecure. This time I want to focus on the SAST JS-X-Ray 🔬.

2. Civic Auth

   www.civic.com featured

   Auth in Less Than 5 Minutes. Civic Auth comes with multiple SSO options, optional embedded wallets, and user management — all implemented with just a few lines of code. Start building today.

   

3. astexplorer

   2 47 6,346 6.0 JavaScript

   A web tool to explore the ASTs generated by various parsers.

   

   I also quickly became familiar with the tool ASTExplorer which allows you to analyze the tree and properties for a specific code.

4. estree

   3 8 5,243 4.8

   The ESTree Spec

   

   When I started the NodeSecure project I had almost no experience 🐤 with AST (Abstract Syntax Tree). My first time was on the SlimIO project to generate codes dynamically with the astring package (and I had also looked at the ESTree specification).

5. meriyah

   4 2 1,110 9.1 TypeScript

   A 100% compliant, self-hosted javascript parser - https://meriyah.github.io/meriyah

   

   I discovered the package estree-walker from Rich Harris which was compatible with the EStree spec. Combined with the meriyah package this allows me to convert a JavaScript source into an ESTree compliant AST.

6. Node-Estree

   5 1 11 2.8 TypeScript

   Complete and compliant ESTree spec implementation in TypeScript

   

   I also had fun re-implementing the ESTree Specification in TypeScript. It helped me a lot to be more confident and comfortable with different concepts that were unknown to me until then.

7. estree-ast-utils

   6 2 2 0.0 JavaScript

   Discontinued Utilities for AST (ESTree compliant)

   

   Since i created my own set of AST utilities including getMemberExpressionIdentifier.

8. cli

   7 12 372 8.5 JavaScript

   JavaScript security CLI that allow you to deeply analyze the dependency tree of a given package or local Node.js project. (by NodeSecure)

   

   When NodeSecure was a single project the AST analysis was at most a few hundred lines in two or three JavaScript files. All the logic was coded with if and else conditions directly in the walker 🙈.

9. SurveyJS

   surveyjs.io featured

   JavaScript Form Builder with No-Code UI & Built-In JSON Schema Editor. Add the SurveyJS white-label form builder to your JavaScript app (React/Angular/Vue3). Build complex JSON forms without coding. Fully customizable, works with any backend, perfect for data-heavy apps. Learn more.

   

Suggest a related project