Developer builds browser-based Spring static analyser with no server or JDK access
A developer built a Java static analysis tool that runs entirely in the browser, requiring no server, JDK, or Maven classpath. The tool uses tree-sitter with a Java grammar to parse code, but without type information, every edge in the call graph is inherently uncertain. To address this, the tool classifies call relationships into three confidence tiers: exact, likely, and weak, based on how reliably a method call can be traced to its target. Low-confidence matches like toString() hitting dozens of model classes are filtered out as noise rather than presented as meaningful relationships. The developer acknowledges this approach has real costs but argues that a tool which confidently reports wrong results is worse than one that openly signals uncertainty.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.
Discussion (0)
Log in to join the discussion and vote.
Log in