Skip to content

Resources & Documentation

Resources & Documentation

Starter List of Tools

opencode is built in TypeScript, using Bun as its runtime, package manager, and test runner. Below are non-exhaustive lists of checks that are available, organized by the categories your team's CI/CD Pipeline Design Document needs to cover.

For other resources, Software Testing Magazine - Open Source JavaScript Code Analysis, Awesome Static Analysis page, and Awesome Dynamic Analysis page have extensive listings of available static and dynamic analysis tools for a pretty hefty list of programming languages.

Some of the tools already have existing GitHub Actions workflows on GitHub Marketplace; use your Googling skills, and see what you find!

Code Quality / Static Analysis

  • flow: Static type checker for JavaScript
  • jshint: Used to flag suspicious usage in JavaScript programs
  • StandardJS/ts-standard: Static analysis tool for code quality within JavaScript/TypeScript projects

Testing / Dynamic Analysis

  • Jalangi: Framework for dynamic analyses in JavaScript
  • Fast-Fuzz: Fuzzing framework for TypeScript
  • Stryker Mutator: Mutation testing tool for JavaScript
  • k6: Open source tool for load testing

Security / Dependency Scanning

  • Retire.js: Finds library/dependency vulnerabilities within your project

Already in use

opencode's own pipeline already runs Qlty for static analysis (you used it in Project 1). Pick something that adds new coverage rather than overlapping with it.