Static Analysis

Jelly is a static analyzer for performing call graphs construction, library usage pattern matching, and vulnerability exposure analysis for JavaScript (and TypeScript) programs that use the Node.js platform.

ML-based-SAST is a tool that uses program slicing and BLSTM network to reduce the false positives during taint analysis.