How are the types not totally screwed up in this kind of pattern? I get that this is JS, but since most of us at the level to be reading this post actually write TS, isn't it true that most of those transformations…
In what format is that information coming in? There are no function taints in githubs OSV data or NVD's data that I can see.
You're right. Nobody bothers to make scanners because there's no data, and nobody has come up with a good format to convey the data between producers (like NVD) and consumers (like dependabot). I wrote a blog post…
I actually found out a bit more about it and added it to the blog post. I found links to the macro examples and so on, added it. It uses jsx/tsx with special tags like <string> and <array>. Honestly, that strikes me as…
I think it's one of those things that if you haven't hit the wall with the JS ecosystem yet, you don't know the wall is there.
I'd REALLY like to hear more about the macro system. I've been yelling about wanting that to become part of typescript for a long time, but I don't think they quite have the vision. In Zig, code can run at compile time,…
Hey, author here. Thank you so much for pointing this out, youre not the first. I'm updating the post. I was waiting for a writeFilePromise to show up, should have guessed they'd be name spaced.
How are the types not totally screwed up in this kind of pattern? I get that this is JS, but since most of us at the level to be reading this post actually write TS, isn't it true that most of those transformations…
In what format is that information coming in? There are no function taints in githubs OSV data or NVD's data that I can see.
You're right. Nobody bothers to make scanners because there's no data, and nobody has come up with a good format to convey the data between producers (like NVD) and consumers (like dependabot). I wrote a blog post…
I actually found out a bit more about it and added it to the blog post. I found links to the macro examples and so on, added it. It uses jsx/tsx with special tags like <string> and <array>. Honestly, that strikes me as…
I think it's one of those things that if you haven't hit the wall with the JS ecosystem yet, you don't know the wall is there.
I'd REALLY like to hear more about the macro system. I've been yelling about wanting that to become part of typescript for a long time, but I don't think they quite have the vision. In Zig, code can run at compile time,…
Hey, author here. Thank you so much for pointing this out, youre not the first. I'm updating the post. I was waiting for a writeFilePromise to show up, should have guessed they'd be name spaced.