Picodes / 4naly3er

Static smart contract code 4naly3er

Home Page:https://github.com/Picodes/4naly3er

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Tool integration support (for napalm maybe 🔥)

JoranHonig opened this issue · comments

Hello I just published https://github.com/ConsenSysDiligence/napalm the other week.

I think it'd be cool to integrate 4naly3er in napalm, however I believe some small things are missing that are needed to make this possible.

  1. computer friendly output: parsing a markdown file is possible ofc, but very painful. Having JSON would make things much easier! I recommend checking out SARIF, which is increasingly gaining adoption for static analysis issue reports.
  2. plugability: if I understand it correctly people currently clone this project and drop in their own detectors, it'd be very nice if there was some way of packaging detectors separate from the main code base.

I understand that both of these features might not be high priority, buut if you do decide to add them I'd be a happy dev and add 4naly3er support to napalm immediately!

This is pretty cool. Napalm is a cool idea. I'm building myself a web app which integrates several solidity analyzers, does forge tests and AI analysis, maybe I should use Napalm.

You should check it out! Though, tbf Napalms' main goal is to help people work with custom detectors!