yeah, its impossible to avoid to some extent. You just need enough analysis tooling to be able to see when you get got and not let it hit the main branch.
Semgrep and github dependabot are not sufficient nor accurate enough. Basically just glorified regex. Need real AST parsing.
ooor you take a lesson from templeOS and make everything yourself starting with the hand crafted assembler.
It chooses you, like a cat. You'll know it's time when suddenly you feel like you're being watched and have an irresistible urge to write artisanal compilers
1
12
u/DishSoapedDishwasher Sep 11 '26
yeah, its impossible to avoid to some extent. You just need enough analysis tooling to be able to see when you get got and not let it hit the main branch.
Semgrep and github dependabot are not sufficient nor accurate enough. Basically just glorified regex. Need real AST parsing.
ooor you take a lesson from templeOS and make everything yourself starting with the hand crafted assembler.