Re: static code analysis for Perl5 code?

Joe Schaefer <[email protected]> Thu, 15 Feb 2024 18:03:09 +0000

Newsgroups	gmane.comp.apache.mod-perl
Message-ID	<DS7PR12MB5888FC4C50D2A04E7622EDD9FE4D2@DS7PR12MB5888.namprd12.prod.outlook.com>

In short, you should just be running Perl with the -T flag.  Perl::Critic is just a very opinionated linter.

Joe Schaefer, Ph.D
<[email protected]>
+1 (954) 253-3732
SunStar Systems, Inc.
Orion - The Enterprise Jamstack Wiki

________________________________
From: Joseph He <[email protected]>
Sent: Thursday, February 15, 2024 10:43:41 AM
To: mod_perl list <[email protected]>
Subject: static code analysis for Perl5 code?

All, good day.

Our company wants to use some tool to do a static analysis on our Perl5 code like what they can do for Java, etc.

I know Perl::Critic can scan the code for the 'best practice'. Other than this, anybody knows that there is another tool supposedly to help find the security loopholes, etc?

Thank you very much.
Joseph