search

Picodes / 4naly3er

Static smart contract code 4naly3er
https://github.com/Picodes/4naly3er
GNU General Public License v3.0
508 stars 137 forks source link

Tool integration support (for napalm maybe 🔥) #47

Open JoranHonig opened 7 months ago

JoranHonig commented 7 months ago

Hello I just published https://github.com/ConsenSysDiligence/napalm the other week.

I think it'd be cool to integrate 4naly3er in napalm, however I believe some small things are missing that are needed to make this possible.

  1. computer friendly output: parsing a markdown file is possible ofc, but very painful. Having JSON would make things much easier! I recommend checking out SARIF, which is increasingly gaining adoption for static analysis issue reports.
  2. plugability: if I understand it correctly people currently clone this project and drop in their own detectors, it'd be very nice if there was some way of packaging detectors separate from the main code base.

I understand that both of these features might not be high priority, buut if you do decide to add them I'd be a happy dev and add 4naly3er support to napalm immediately!

izcoser commented 6 months ago

This is pretty cool. Napalm is a cool idea. I'm building myself a web app which integrates several solidity analyzers, does forge tests and AI analysis, maybe I should use Napalm.

JoranHonig commented 6 months ago

You should check it out! Though, tbf Napalms' main goal is to help people work with custom detectors!