Slack

Hakana: Taking Hack Seriously

Feb 8, 2023
Hakana: Taking Hack Seriously
SummaryAI, from the source post

This post introduces Hakana, a new open-source static analysis tool for Hack, developed at Slack. It details Hakana's technical foundation (based on Psalm, written in Rust, using Hack parser), its usage in CI for code behavior enforcement (unused code, type checks, security vulnerabilities, internal API misuse), its security analysis capabilities (interprocedural and intraprocedural analysis, literal string types for SQL injection prevention), its extensibility via plugins, and its performance benefits (5x faster than Psalm). It also explains the rationale for open-sourcing Hakana.

More from the Static Analysis Tooling trail