4 ms·
"The whole purpose of this project is to get people using static analysis. I think they're an excellent resource for projects and can help you find problems in
by chair6 12y ago
"The whole purpose of this project is to get people using static analysis. I think they're an excellent resource for projects and can help you find problems in your code and even learn new things." -- agreed! I'm looking forward to having a play with Prospector.
For those who are interested in this, check out the security-focused Python static analysis tool that I built an initial PoC for and we've been building out within the OpenStack Security Group. The Bandit project page is at https://wiki.openstack.org/wiki/Security/Projects/Bandit https://wiki.openstack.org/wiki/Security/Projects/Bandit and the code at https://github.com/stackforge/bandit https://github.com/stackforge/bandit.
- carlio 12y agoBandit looks like a really great addition to the various Python checking tools. Expect some pull requests soon!