$ show DeepSourceCorp/globstar
Globstar is a static analysis toolkit that enables developers to write custom checkers in YAML or Go and run them via a single portable binary. It uses tree-sitter for AST-based analysis, supporting multiple languages (Go, Java, JavaScript, Python, Ruby, etc.). The tool is designed to be fast, dependency-free, and CI-friendly, with a focus on enforcing learned patterns such as security vulnerabilities and code quality issues. The architecture consists of a CLI layer, an analysis engine for parsing and scope resolution, and a checker system with built-in and custom checker support.
The LLM identified 2 files worth highlighting for reuse:
Implements a language-agnostic scope tree for tracking variable declarations and resolutions. This component is reusable in any static analysis tool that needs to manage variable scopes, demonstrating a clean implementation of a fundamental compiler concept without tight coupling to the rest of the Globstar framework.
Provides self-contained utilities for interacting with Git repositories (e.g., finding repository root, listing changed files). This component can be extracted and used in any Go project requiring Git operations, showcasing a simple and focused wrapper around os/exec for common Git commands.