Verification

Top 23 Verification Open-Source Projects

  • trufflehog

    Find and verify credentials

  • Project mention: Seeking help to identify vulnerabilities and secrets in a website backup file | /r/HowToHack | 2023-07-03

    Trufflehog

  • immudb

    immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history

  • Project mention: Ask HN: What is your experience of tamper proof systems? | news.ycombinator.com | 2024-01-05
  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • mockk

    mocking library for Kotlin

  • Project mention: For those DAO, Services, how about using static objects with mockk for test | /r/u_Fun_Indication4997 | 2023-12-08

    The official suggests using dagger/hilt to inject them. However, they could be static based on the static ApplicationContext. Although Dagger/hilt aids in unit testing, mockk can accomplish this easily as well by modifying bytecode during run time. As for the stability, `mockk` has 5000+ stars on GitHub and keeps renewing.

  • dafny

    Dafny is a verification-aware programming language

  • Project mention: Candy – a minimalistic functional programming language | news.ycombinator.com | 2024-02-24
  • FStar

    A Proof-oriented Programming Language

  • Project mention: Lean4 helped Terence Tao discover a small bug in his recent paper | news.ycombinator.com | 2023-10-27
  • sqa-wiki

    My own notes (drafts mostly) about software quality

  • Project mention: 10 Github Repositories for Software Testers | dev.to | 2023-10-21

    4. SQA wiki

  • tlaplus

    TLC is a model checker for specifications written in TLA+. The TLA+Toolbox is an IDE for TLA+.

  • Project mention: Ask HN: Usefulness of formal verification (Coq) and formal verification (TLA+)? | news.ycombinator.com | 2024-04-07
  • WorkOS

    The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.

    WorkOS logo
  • owasp-masvs

    The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

  • Project mention: More ways to identify independently security tested apps on Google Play | news.ycombinator.com | 2023-11-03

    https://github.com/OWASP/owasp-masvs :

    > The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.

  • kani

    Kani Rust Verifier

  • Project mention: The C Bounded Model Checker: Criminally Underused | news.ycombinator.com | 2024-01-30

    This is also the backend for Kani - Amazon's formal verification tool for Rust.

    https://github.com/model-checking/kani

  • cocotb

    cocotb, a coroutine based cosimulation library for writing VHDL and Verilog testbenches in Python

  • Project mention: Designing a Low Latency 10G Ethernet Core | /r/FPGA | 2023-07-04

    The use of cocotb and pyuvm for verification

  • hacl-star

    HACL*, a formally verified cryptographic library written in F*

  • prusti-dev

    A static verifier for Rust, based on the Viper verification infrastructure.

  • Project mention: Using_Prolog_as_the_AST | news.ycombinator.com | 2023-10-21

    > The overall goal would be to figure out classical error conditions like nill pointers deference.

    > If I can figure out if a pointer will be nil in some execution branch, there is no reason why a computer cannot do the same.

    Note, this is called flow-sensitive typing (also called type narrowing) and I think that typescript does it.

    https://en.wikipedia.org/wiki/Flow-sensitive_typing

    > I personally would see this as an human race level upgrades. Imagine feeding your code to a CI that spit back something like: "you will have a panic at line 156 when your input is > 4"

    A model checker can do that!

    See this

    https://model-checking.github.io/kani/tutorial-kinds-of-fail...

    Other techniques are also possible

    https://github.com/viperproject/prusti-dev#quick-example

    (Here I could link a lot of things, I just selected two Rust projects to illustrate)

    This works better if you are able to provide contracts in your API that says which guarantees you provide. Alternatively, asserts are useful too.

  • liquidhaskell

    Liquid Types For Haskell

  • email-verifier

    :white_check_mark: A Go library for email verification without sending any emails.

  • riscv

    RISC-V CPU Core (RV32IM)

  • Project mention: Ultraembedded RISCV Module | /r/RISCV | 2023-08-04

    I have been trying to execute some instructions to the ultraembedded riscv module https://github.com/ultraembedded/riscv

  • Validate

    ⚔ Go package for data validation and filtering. support Map, Struct, Form data. Go通用的数据验证与过滤库,使用简单,内置大部分常用验证、过滤器,支持自定义验证器、自定义消息、字段翻译。

  • Checker Framework

    Pluggable type-checking for Java

  • Project mention: @Nullable et @NonNull | dev.to | 2024-03-29
  • creusot

    Creusot helps you prove your code is correct in an automated fashion.

  • Project mention: Creusot, a deductive verifier for Rust code | news.ycombinator.com | 2024-02-29
  • SmsVerifyCatcher

    Android library for phone number verification feature in your app. Automatically copies verification code from SMS right into the app. Made by Stfalcon

  • magmide

    A dependently-typed proof language intended to make provably correct bare metal code possible for working software engineers.

  • Project mention: Languages on the rise like Rust and Go are being quite vocal against inheritance and many engineers seem to agree. Is this the end of inheritance? What do you think? | /r/rust | 2023-07-04

    https://github.com/magmide/magmide when

  • cryptominisat

    An advanced SAT solver

  • Project mention: The Silent (R)evolution of SAT | news.ycombinator.com | 2023-05-26

    ManySAT: http://www.cril.univ-artois.fr/~jabbour/manysat.htm

    It shares short conflict clauses between parallel solvers and achieves superlinear speedup in some cases, e.g., 4 parallel solvers solve faster than one forth of the single solver soolution time.

    Short conflict clauses are rare so there is little communication between solvers required.

    CryptoMiniSAT: https://github.com/msoos/cryptominisat

    Author's goal to have solver that is good in computing range from single CPU up to cluster. Judging from CryptoMiniSAT successes, he has mostly reached the goal.

  • f-license

    Open Source License Key Generation and Verification Tool written in Go

  • Project mention: A SaaS product for this software licensing project? | news.ycombinator.com | 2024-01-24
  • vunit

    VUnit is a unit testing framework for VHDL/SystemVerilog

  • SaaSHub

    SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives

    SaaSHub logo
NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020). The latest post mention was on 2024-04-07.

Verification related posts

Index

What are some of the best open-source Verification projects? This list will help you:

Project Stars
1 trufflehog 13,822
2 immudb 8,481
3 mockk 5,275
4 dafny 2,659
5 FStar 2,558
6 sqa-wiki 2,200
7 tlaplus 2,197
8 owasp-masvs 1,943
9 kani 1,868
10 cocotb 1,590
11 hacl-star 1,578
12 prusti-dev 1,459
13 liquidhaskell 1,147
14 email-verifier 1,062
15 riscv 1,040
16 Validate 1,005
17 Checker Framework 975
18 creusot 968
19 SmsVerifyCatcher 848
20 magmide 803
21 cryptominisat 788
22 f-license 765
23 vunit 680
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com