facebook/pyre-check
Pyre Check
Pyre is a high-performance static type checker and analysis tool for Python. It identifies type errors and ensures type safety without executing the program, utilizing a static type inference engine to maintain consistency across functions.
The project is distinguished by an incremental type analysis engine that operates as a background daemon. This system monitors filesystem changes to re-validate only modified parts of a project, reducing the time required for repeated analysis. It also includes a static analysis security tool that uses taint analysis to track untrusted data flows and identify potential security vulnerabilities.
Beyond type checking, the tool functions as a code quality scanner to detect logic errors, such as dead stores and unawaited awaitables. It provides type coverage tracking to quantify the proportion of typed versus untyped expressions and supports complex type verification for variadic arguments and decorator parameters.
The analysis scope can be customized through configuration settings that allow for strict type enforcement or the suppression of specific type errors.
Features
- Incremental Analysis Daemons - Implements a background daemon that maintains the codebase in memory for rapid, incremental static analysis updates.
- Python Type Checkers - Provides a high-performance static type checker specifically designed for the Python language ecosystem.
- Type Checking - Analyzes Python source code to identify type errors and ensure type safety without executing the program.
- Security and Vulnerability Scanning - Uses taint analysis to detect security flaws and vulnerabilities within Python source code.
- Incremental Build Engines - Utilizes an incremental build engine to re-validate only modified code fragments, reducing total analysis time.
- Static Analysis Security Testing - Implements a taint analysis engine for identifying security vulnerabilities through static source code analysis.
- Abstract Syntax Tree Parsing - Parses Python source code into structural representations to identify type inconsistencies and logic errors.
- Code Quality Tools - Functions as a code quality tool to detect logic errors and maintain high software quality standards.
- Static Logic Error Detection - Scans source code for common programming mistakes like unawaited awaitables and dead stores.
- Static Type Inference Engines - Features a static type inference engine that deduces expression types from source code without executing the program.
- Type Integrity Enforcement - Enforces rigorous type adherence policies across the codebase to maximize safety and catch subtle errors.
- Large-Scale Type Maintenance - Tracks type coverage and suppresses legacy errors to gradually improve type safety across large codebases.
- Type Coverage Analysis - Quantifies the proportion of typed versus untyped expressions to measure overall codebase safety.
- Type Coverage Analysis - Surfaces metrics on the proportion of a codebase covered by type annotations via editors and dashboards.
- Analysis Scope Filters - Allows defining which source directories and third-party packages are included or excluded from analysis.
- Violation Suppression - Provides the ability to ignore reported type violations for specific files to silence noise from legacy code.
- Taint Analysis Engines - Provides a taint analysis engine to track untrusted data propagation and identify security vulnerabilities.
- डिबगिंग और ट्रेसिंग - Performs type-checking for Python.
- Type Checkers - High-performance type checking designed for large-scale codebases.
