• Home
Name Date Size #Lines LOC

..--

config/22-Oct-2025-2726

script/22-Oct-2025-5634

src/22-Oct-2025-41,89732,280

.prettierrcD22-Oct-2025224 1111

LICENSED22-Oct-202511.1 KiB202169

OAT.xmlD22-Oct-20251.1 KiB2611

README.en.mdD22-Oct-20253.8 KiB9665

README.mdD22-Oct-20254.1 KiB10868

package.jsonD22-Oct-2025716 2625

tsconfig.jsonD22-Oct-2025222 1212

tsconfig.main.jsonD22-Oct-202512 KiB101101

tsconfig.prod.jsonD22-Oct-2025142 99

typedoc.jsonD22-Oct-2025505 2222

vitest.config.tsD22-Oct-2025824 269

README.en.md

1# sig_programanalysis
2
3English | [简体中文](./README.md)
4
5## SIG Group Work Objectives and Scope
6
7### Work Objectives
8
9* Sig_programanalysis aims to carry out program analysis technology exploration, key technology identification, and competitiveness building for OpenHarmony systems and apps, striving to become the gathering place for OpenHarmony system and app analysis capabilities and an incubation place for related engineering tools.
10
11* Sig_programanalysis will build a basic program analysis framework for OpenHarmony apps, and subsequently based on it to provide application developers with out-of-the-box defect scanning and analysis tools, making it possible to automatically vet code for scenarios such as IDE, CI/CD pipelines, etc.
12
13### Work Scope
14
15* Responsible for building and maintaining the key technology map of program analysis, as well as the decomposition of functional modules in the field, interface definition, and maintenance management.
16
17* Responsible for the architecture design, open source development, and project maintenance of projects related to program analysis.
18
19
20### Projects
21
22Sig_programanalysis currently incubates the following projects. Everyone is welcome to participate (you can apply to participate in the co-construction of existing projects, or you can apply to create a new program analysis project).
23
24
25* ArkAnalyzer:
26The Static Analysis Framework for ArkTS-based OpenHarmony Apps.
27
28* ArkCheck:
29Checking OpenHarmony Apps for Potential Code-level Defects
30
31
32## SIG Members
33
34
35### Leader
36
37- [lilicoding](https://gitee.com/lilicoding)
38
39
40### Committers
41- [kubigao](https://gitee.com/kubigao)
42- [yifei-xue](https://gitee.com/yifei_xue)
43- [kubrick-hjh](https://gitee.com/kubrick-hjh)
44- [speed9](https://gitee.com/speeds)
45- [bbsun](https://gitee.com/bbsun)
46- [chn](https://gitee.com/chn)
47- [Elouan](https://gitee.com/Elouan)
48- [Rnine](https://gitee.com/Rnine)
49- [workspace_cb](https://gitee.com/workspace_cb)
50- [longyuC](https://gitee.com/longyuC)
51- [xyji95](https://gitee.com/xyji95)
52- [xulingyun-red](https://gitee.com/xulingyun-red)
53
54
55### Meetings
56 - Meeting Time: Bi-weekly meeting, Thursday 19:30 Beijing time
57 - Meeting Application:[Link](https://shimo.im/forms/B1Awd60W7bU51g3m/fill)
58 - Meeting Link: Welink or Others
59 - Meeting Notification: [Subscribe to](https://lists.openatom.io/postorius/lists/dev.openharmony.io) mailing list dev@openharmony.io for the meeting link
60 - Meeting Summary: [Archive link address](https://gitee.com/openharmony-sig/sig-content)
61
62### Contact
63
64- Mailing list: [dev@openharmony.io](https://lists.openatom.io/postorius/lists/dev@openharmony.io/)
65
66***
67# ArkAnalyzer: Static Program Analysis Framework for the ArkTS Language
68## Develope environment setup
691. [Download Visual Studio Code](https://code.visualstudio.com/download) or other IDEA;
702. [Download Node.js](https://nodejs.org/en/download/current) and install it. Node.js is a runtime environment for JavaScript, which comes with its own package manager, npm.
713. Install Typescript via npm:
72```shell
73npm install -g typescript
74```
754. Install dependency libraries
76```shell
77cd arkanalyzer
78npm install
79```
805. [Optional] Generate the latest API documentation, which will be created at docs/api_docs.
81```shell
82npm run gendoc
83```
84
85## Docmentations
86
871. ArkAnalyzer API docmentations,refer to the [link](https://gitcode.com/openharmony-sig/arkanalyzer/wiki/globals.md).
88
89## Commit codes
90Follow the code repository standards of Openharmony-Sig, refer to the [link](docs/HowToCreatePR.md#english)
91
92## Debug
93Modify the `args` parameter array in the debug configuration file `.vscode/launch.json` to the path of the test file you want to debug, and then start the debugging process.
94
95## Add test cases
96Place all new test codes in the `tests` directory. Corresponding sample code and other resource files should be placed in the ``tests\resources` directory, and create different folders for each testing scenario.

README.md

1# sig_programanalysis
2
3简体中文 | [English](./README.en.md)
4
5说明:本SIG的内容遵循OpenHarmony的PMC管理章程 [README](../../zh/pmc.md)中描述的约定。
6
7
8## SIG组工作目标和范围
9
10
11
12### 工作目标
13
14* 程序分析-SIG(Sig_programanalysis) 旨在面向OpenHarmony系统和原生应用开展程序分析技术洞察、关键技术识别和竞争力构建,同时成为OpenHarmony系统和应用程序分析能力的聚集地和相关工程工具的孵化地。
15
16* 程序分析-SIG(Sig_programanalysis)将面向OpenHarmony应用构建基础程序分析框架并基于此为应用开发者提供开箱即用的缺陷扫描分析工具,面向IDE、流水线门禁、应用市场上架审核等场景,打造自动化工具看护能力。
17
18### 工作范围
19
20* 负责程序分析子领域关键根技术地图梳理,以及领域内功能模块分解、接口定义与维护管理等工作。
21
22* 负责程序分析子领域相关项目的架构设计、开源开发和项目维护等工作。
23
24
25### 项目孵化
26
27程序分析-SIG(Sig_programanalysis)正积极孵化如下项目,欢迎大家参与共享共建(可申请参与已有项目的共建,也可申请创建新的程序分析项目并联合社区启动开源共建)。
28
29
30* 方舟分析器(ArkAnalyzer):
31	面向ArkTS的OpenHarmony应用程序分析框架。
32
33* 方舟检测器(ArkCheck):
34	面向OpenHarmony应用开发提供代码级缺陷自动检测(I期聚焦高性能编码规则的自动化检测)
35
36
37
38## SIG组成员
39
40
41### Leader
42
43- [lilicoding](https://gitcode.com/lilicoding)
44
45
46### Committers列表
47- [kubigao](https://gitcode.com/kubigao)
48- [yifei-xue](https://gitcode.com/yifei-xue)
49- [kubrick-hjh](https://gitcode.com/kubrick-hjh)
50- [speed9](https://gitee.com/speeds)
51- [bbsun](https://gitcode.com/bbsun)
52- [chn](https://gitcode.com/chn)
53- [Elouan](https://gitcode.com/Elouan)
54- [Rnine](https://gitcode.com/Rnine1)
55- [workspace_cb](https://gitee.com/workspace_cb)
56- [longyuC](https://gitee.com/longyuC)
57- [xyji95](https://gitcode.com/xyji95)
58- [xulingyun](https://gitcode.com/muya318)
59
60
61### 会议
62 - 会议时间:双周例会,周四晚上19:00, UTC+8
63 - 会议申报:[申报链接](https://shimo.im/forms/B1Awd60W7bU51g3m/fill)
64 - 会议链接:Welink或其他会议
65 - 会议通知:请[订阅](https://lists.openatom.io/postorius/lists/dev.openharmony.io)邮件列表 dev@openharmony.io 获取会议链接
66 - 会议纪要:[归档链接地址](https://gitee.com/openharmony-sig/sig-content)
67
68
69### Contact (optional)
70
71- 邮件列表:[dev@openharmony.io](https://lists.openatom.io/postorius/lists/dev@openharmony.io/)
72
73***
74
75# 方舟分析器:面向ArkTS语言的静态程序分析框架
76## ArkAnalyzer 环境配置
771. 从[Download Visual Studio Code](https://code.visualstudio.com/download)下载vscode并安装,或安装其他IDE。
782. 从[Download Node.js](https://nodejs.org/en/download/current)下载Node.js并安装,Node.js为JavaScript的运行时环境,自带包管理器npm。
793. 通过npm安装TypeScript编译器,命令行输入
80```shell
81npm install -g typescript
82```
834. 安装依赖库
84```shell
85npm install
86```
875. 【可选】生成最新API文档,文档生成在 docs/api_docs88```shell
89npm run gendoc
90```
91
92## ArkAnalyzer 文档
93
941. ArkAnalyzer 快速入门文档,请参考:[链接](https://gitcode.com/openharmony-sig/arkanalyzer/wiki/ArkAnalyzer%E5%BF%AB%E9%80%9F%E5%85%A5%E9%97%A8%E6%8C%87%E5%8D%97.md)952. ArkAnalyzer API文档,请参考:[链接](https://gitcode.com/openharmony-sig/arkanalyzer/wiki/globals.md)96
97## ArkAnalyzer 代码上库
98遵守openharmony-sig代码上库规范, 操作方法请参考:[链接](docs/HowToCreatePR.md#中文)
99
100## ArkAnalyzer 调试
101将调试配置文件`.vscode/launch.json`中`args`参数数组修改为想要调试的文件路径,然后启动调试。
102
103## 添加自验证测试用例
104新增测试代码统一放至`tests`目录下,对应的样例代码和其他资源文件统一放至`tests\resources`,按测试场景创建不同文件夹。
105
106## ArkAnalyzer Issues
107请参考[连接](docs/HowToHandleIssues.md)提交Issues。
108