Skip to content

Resources

Resources & Documentation

Starter List of Tools

NodeBB is built in Javascript/Typescript using Node.js and uses Benchpress for its frontend templating. Below are non-exhaustive lists of analysis tools that are available.

For other resources, Software Testing Magazine - Open Source JavaScript Code Analysis, Awesome Static Analysis page, and Awesome Dynamic Analysis page have extensive listings of available static and dynamic analysis tools for a pretty hefty list of programming languages.

Some of the tools already have existing GitHub Actions workflows on GitHub Marketplace; use your Googling skills, and see what you find!

Static Tools

  • flow: Static type checker for JavaScript
  • jshint: Used to flag suspicious usage in JavaScript programs
  • StandardJS/ts-standard: Static analysis tool for code quality within JavaScript/TypeScript projects
  • Retire.js: Finds library/node module vulnerabilities within your project

Dynamic Tools

  • Jalangi: Framework for dynamic analyses in JavaScript
  • Fast-Fuzz: Fuzzing framework for TypeScript
  • Stryker Mutator: Mutation testing tool for JavaScript
  • k6: Open source tool for load testing