Fragments Dec 4
A summary of recent tech articles discussing AI's impact on code quality, AI-assisted healthcare, security risks, and developer productivity.
A summary of recent tech articles discussing AI's impact on code quality, AI-assisted healthcare, security risks, and developer productivity.
Using Mono.Cecil to scan .NET assemblies for external method and type references, enabling code analysis and security checks.
Explores JSpecify and NullAway as modern solutions for null safety in Java, addressing the long-standing problem of NullPointerExceptions.
A look at a subtle bug in a Go test where a for loop iterates over an empty slice, and how static analysis tools miss it.
Introduces Swift Dependency Audit, a CLI tool and SwiftPM plugin for auditing Swift package dependencies against source imports.
Discusses the risks of suppressing lint rules in code and proposes a meta-lint rule to prevent suppressing critical rules.
Introducing Ivar, a tool that provides Ruby developers with warnings for typos in instance variable names, preventing runtime errors.
A guide to integrating JetBrains Qodana, a code quality analysis tool, into GitLab CI/CD pipelines and publishing its reports via GitLab Pages.
A developer reflects on how his coding style and preferences have evolved over a decade, moving away from abstractions and clever code toward simplicity and practicality.
A developer shares the design process and challenges of implementing improved lazy loading in their custom ORM, focusing on static analysis and reducing configuration.
Explains how to use the MemberNotNullWhen attribute in C# to fix nullability warnings for guarded properties, ensuring clean builds.
A talk on strategies and techniques for migrating existing C# codebases to use nullable reference types and improve null safety.
A technical guide on integrating TwoSlash with Shiki for enhanced TypeScript code snippets with type hints and syntax highlighting.
An overview of JSpecify, a project creating standard annotations for null tracking in Java static analysis.
A guide on switching a Python project from multiple linters to Ruff, a single, powerful tool.
A step-by-step guide to installing and running a local SonarQube instance for code quality analysis and experimentation.
Explains the new #[Override] attribute in PHP 8.3, its purpose for preventing bugs, and includes commentary on static analysis in PHP.
Announcing a live stream with a typescript-eslint maintainer to build custom ESLint rules and answer questions about ESLint for JavaScript/TypeScript.
Guide to securing Azure infrastructure code using DevSecOps practices, Azure DevOps, and the KICS open-source static analysis tool.
A developer's wishlist for PHP improvements, including generics, static analysis, a TypeScript-like superset, and syntax enhancements.