Code intelligence has escaped the code
A surprising amount of program behavior is defined by what is outside
David Baker Effendi
Catching Resources Held Across Async Suspension
An asynchronous function can release every resource before it finishes and still
Following untrusted data through a database
A profile field can be stored safely with a parameterized SQL query
What is the best static analysis tool for your use case?
DataFlowBench ranks eight static analyzers for CI, editors, security review, and low-noise workflows, including licensing trade-offs.
The Taint Analysis Power Ranking
Eight analyzers, thirteen languages, and not one clean sweep
Reliable agentic code
Why we switched SlopCop to Flash 3.5
Flash 3.5's release showcases the latest iteration of our
SlopCop: Forensics for your codebase
SlopCop started from a familiar problem: agents can write code quickly, but
Building a JavaScript Reference Graph With an Agent
At Brokk we build tools that make LLMs more effective by providing
Stop Allocating Nothing: How We Tripled Java TreeSitter Performance...
(...on our CI/CD performance regression tests)
Upgrades in this post are