Where communities thrive


  • Join over 1.5M+ people
  • Join over 100K+ communities
  • Free without limits
  • Create your own community
People
Activity
  • Dec 04 2017 09:04
    @jayvdb banned @shaipranesh11
  • Dec 04 2017 08:51
    @jayvdb banned @syntax-explorer
  • Dec 04 2017 08:51
    @jayvdb banned @athulpn
Martin Čarnogurský
@RootLUG
Hello! I recently found this project and it looks like it would be a great fit into my thesis research (static malware analysis) although I have a couple of questions that I haven't found in docs. I'm trying to find a replacement of "Stratego/XT" that is more python friendly and that's when I found coala. My primary aim is to do AST transformations such as deobfuscating code (constant propagation, removing unused code, looking up function calls from imports) and detections based on AST such as if python source code is opening a local file, if it's doing http requests (such as looking for import requests and then usage of that library). Is this something that can be done with coala and if I develop custom bears? Does bears support AST transformations and what are the limitations there? Or would you perhaps not recommend using coala for this kind of stuff? Thanks
John Vandenberg
@jayvdb
@RootLUG are you only interested in python ast? Or other languages also?
Martin Čarnogurský
@RootLUG
@jayvdb mainly python. Having support for other is just a bonus, that's why coala looks good since it supports more then python out of box although initial PoC implementation is for Python (2 & 3) only
John Vandenberg
@jayvdb
The pyflakes 'meta' bear is the best for python, and antlr for more languages https://gitlab.com/coala/bears
John Vandenberg
@jayvdb
there are more advanced tools for the domain you are researching. Bandit is the most adv general purpose tool with features like that, for python. And pylint's ast is the most advances
John Vandenberg
@jayvdb
but, if you want to write tools in a few frameworks, like both of the above, and join them together, you've come to the right place. We know most of those tools ;)
Martin Čarnogurský
@RootLUG
great, I already wrote my custom AST parser and some basic transformation but I feel like I'm reinventing a wheel so I'm looking for something already done and rather extending that. Thanks for the suggestions!
bandit was also on my radar but didn't had a chance to look at it but based on your reply I will prioritize that. Does coala use bandit under the hood (e.g. in bears) or are they unrelated?
John Vandenberg
@jayvdb
we are happy to have bears for almost any linter/toolkit, and the bears add settings to improve the way the results are handled, e.g. disabling results with lower reliability, and grouping them by type, normalising line numbers. also emits json of all results, so post filtering/manipulation is possible in one sane format
Martin Čarnogurský
@RootLUG
Ufff... I just found a problem with bandit that it's using native ast module for parsing meaning unreliable results if the target python version is different then installed :( I assume this shouldn't be a problem in Coala parser?
John Vandenberg
@jayvdb
coala & bears run on py3, but the linters can run on py2 runtime. You still need the py2 runtime installed/available for those tools.
Lets move this discussion to our ast room
K. Kaushik Reddy
@urstrulykkr
Hello World
John Vandenberg
@jayvdb
hiya
K. Kaushik Reddy
@urstrulykkr
:)
Naveen Naidu
@Naveenaidu
I never knew we have a room for conference :open_mouth:
Rahul Jha
@RJ722
Who all here have bought tickets for PyCon India 2019?
Naveen Naidu
@Naveenaidu
Me o/
Vaibhav Rai
@RaiVaibhav
If anyone is willing to transfer kindly pm me, I need one 😛
(except student ticket)
Rahul Jha
@RJ722
@RaiVaibhav you should ask on the mailing list. I guess, a thread regarding the same has already started.
@Naveenaidu nice, see you there pal! \o
Vaibhav Rai
@RaiVaibhav
Yes I will ask today
Vaibhav Rai
@RaiVaibhav
Hey @RJ722 are you submitting a proposal for devsprints? If yes consider me in
Sangam Kumar
@sangamcse
Most probably, I will be there
Vaibhav Rai
@RaiVaibhav
Who else is planning for the PyCon, I will be there
Rahul Jha
@RJ722
@RaiVaibhav I have too much on my plate right now, won't be able to submit a cfp
I will love to help though if someone will put up one
I'm not sure why exactly do we need a cfp for devsprints
Vaibhav Rai
@RaiVaibhav
Isn't we have to submit cpf for devsprints in PyCon?
Sangam Kumar
@sangamcse
Does anyone know someone who has extra PyCon India ticket?
Rahul Jha
@RJ722
@sangamcse shoot an email to the mailing list
@RaiVaibhav I meant, what is the reason behind organizers asking us for putting up a cfp for devsprints.
Enough people get together, hack on a single project.
Vaibhav Rai
@RaiVaibhav

I meant, what is the reason behind organizers asking us for putting up a cfp for devsprints.

Srsly don't know

But we can use the @nalinbhardwaj proposal of last year as a boilerplate, I will be submitting the cfp very soon
Rahul Jha
@RJ722
@RaiVaibhav nice!
Vaibhav Rai
@RaiVaibhav
Submitted the proposal, content mostly same as past dev sprint proposals,
https://in.pycon.org/cfp/devsprint-2019/proposals/coala-static-code-analysis-for-all-languages~boqNe/
Vaibhav Rai
@RaiVaibhav
Kindly upvote and suggest changes/improvements which can be done, also comment on how can we make this session more interactive.
Abhinav Kaushlya
@abhishalya
No goodies?
PRAJWAL M
@PrajwalM2212
Upvoted
Vaibhav Rai
@RaiVaibhav
@abhishalya thanks totally forgot, I will add it in the description :+1:
Rahul Jha
@RJ722
What goodies do we have?
I just found some (100 or so) coala pamphlets sitting in my cupboard.
I also have an extra t-shirt for coala and (gitmate?) not sure, would need to check!
Vaibhav Rai
@RaiVaibhav
I was thinking about the stickers
Vaibhav Rai
@RaiVaibhav
Anyone else attending the PyCon?
Satwik Kansal
@satwikkansal
I'm attending! I have a few stickers too from last-to-last year's Pycon.
Vaibhav Rai
@RaiVaibhav
Great :+1: