The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning. Learn more →
Top 23 Verification Open-Source Projects
-
immudb
immudb - immutable database based on zero trust, SQL/Key-Value/Document model, tamperproof, data change history
-
InfluxDB
Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
-
tlaplus
TLC is a model checker for specifications written in TLA+. The TLA+Toolbox is an IDE for TLA+.
-
WorkOS
The modern identity platform for B2B SaaS. The APIs are flexible and easy-to-use, supporting authentication, user identity, and complex enterprise features like SSO and SCIM provisioning.
-
owasp-masvs
The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
-
cocotb
cocotb, a coroutine based cosimulation library for writing VHDL and Verilog testbenches in Python
-
Validate
⚔ Go package for data validation and filtering. support Map, Struct, Form data. Go通用的数据验证与过滤库,使用简单,内置大部分常用验证、过滤器,支持自定义验证器、自定义消息、字段翻译。
-
SmsVerifyCatcher
Android library for phone number verification feature in your app. Automatically copies verification code from SMS right into the app. Made by Stfalcon
-
magmide
A dependently-typed proof language intended to make provably correct bare metal code possible for working software engineers.
-
SaaSHub
SaaSHub - Software Alternatives and Reviews. SaaSHub helps you find the best software and product alternatives
Project mention: Seeking help to identify vulnerabilities and secrets in a website backup file | /r/HowToHack | 2023-07-03Trufflehog
Project mention: Ask HN: What is your experience of tamper proof systems? | news.ycombinator.com | 2024-01-05
Project mention: For those DAO, Services, how about using static objects with mockk for test | /r/u_Fun_Indication4997 | 2023-12-08The official suggests using dagger/hilt to inject them. However, they could be static based on the static ApplicationContext. Although Dagger/hilt aids in unit testing, mockk can accomplish this easily as well by modifying bytecode during run time. As for the stability, `mockk` has 5000+ stars on GitHub and keeps renewing.
Project mention: Candy – a minimalistic functional programming language | news.ycombinator.com | 2024-02-24
Project mention: Lean4 helped Terence Tao discover a small bug in his recent paper | news.ycombinator.com | 2023-10-27
4. SQA wiki
Project mention: Ask HN: Usefulness of formal verification (Coq) and formal verification (TLA+)? | news.ycombinator.com | 2024-04-07
Project mention: More ways to identify independently security tested apps on Google Play | news.ycombinator.com | 2023-11-03https://github.com/OWASP/owasp-masvs :
> The OWASP MASVS (Mobile Application Security Verification Standard) is the industry standard for mobile app security.
Project mention: The C Bounded Model Checker: Criminally Underused | news.ycombinator.com | 2024-01-30This is also the backend for Kani - Amazon's formal verification tool for Rust.
The use of cocotb and pyuvm for verification
> The overall goal would be to figure out classical error conditions like nill pointers deference.
> If I can figure out if a pointer will be nil in some execution branch, there is no reason why a computer cannot do the same.
Note, this is called flow-sensitive typing (also called type narrowing) and I think that typescript does it.
https://en.wikipedia.org/wiki/Flow-sensitive_typing
> I personally would see this as an human race level upgrades. Imagine feeding your code to a CI that spit back something like: "you will have a panic at line 156 when your input is > 4"
A model checker can do that!
See this
https://model-checking.github.io/kani/tutorial-kinds-of-fail...
Other techniques are also possible
https://github.com/viperproject/prusti-dev#quick-example
(Here I could link a lot of things, I just selected two Rust projects to illustrate)
This works better if you are able to provide contracts in your API that says which guarantees you provide. Alternatively, asserts are useful too.
I have been trying to execute some instructions to the ultraembedded riscv module https://github.com/ultraembedded/riscv
Project mention: Languages on the rise like Rust and Go are being quite vocal against inheritance and many engineers seem to agree. Is this the end of inheritance? What do you think? | /r/rust | 2023-07-04https://github.com/magmide/magmide when
ManySAT: http://www.cril.univ-artois.fr/~jabbour/manysat.htm
It shares short conflict clauses between parallel solvers and achieves superlinear speedup in some cases, e.g., 4 parallel solvers solve faster than one forth of the single solver soolution time.
Short conflict clauses are rare so there is little communication between solvers required.
CryptoMiniSAT: https://github.com/msoos/cryptominisat
Author's goal to have solver that is good in computing range from single CPU up to cluster. Judging from CryptoMiniSAT successes, he has mostly reached the goal.
Project mention: A SaaS product for this software licensing project? | news.ycombinator.com | 2024-01-24
Verification related posts
- Ask HN: Usefulness of formal verification (Coq) and formal verification (TLA+)?
- @Nullable et @NonNull
- Creusot, a deductive verifier for Rust code
- Creusot, a deductive verifier for Rust code
- Candy – a minimalistic functional programming language
- Too Dangerous for C++
- A SaaS product for this software licensing project?
-
A note from our sponsor - WorkOS
workos.com | 19 Apr 2024
Index
What are some of the best open-source Verification projects? This list will help you:
Project | Stars | |
---|---|---|
1 | trufflehog | 13,822 |
2 | immudb | 8,481 |
3 | mockk | 5,275 |
4 | dafny | 2,659 |
5 | FStar | 2,558 |
6 | sqa-wiki | 2,200 |
7 | tlaplus | 2,197 |
8 | owasp-masvs | 1,943 |
9 | kani | 1,868 |
10 | cocotb | 1,590 |
11 | hacl-star | 1,578 |
12 | prusti-dev | 1,459 |
13 | liquidhaskell | 1,147 |
14 | email-verifier | 1,062 |
15 | riscv | 1,040 |
16 | Validate | 1,005 |
17 | Checker Framework | 975 |
18 | creusot | 968 |
19 | SmsVerifyCatcher | 848 |
20 | magmide | 803 |
21 | cryptominisat | 788 |
22 | f-license | 765 |
23 | vunit | 680 |