Reasonably-most-general clients for JavaScript library analysis

EK Kristensen, A Møller - 2019 IEEE/ACM 41st International …, 2019 - ieeexplore.ieee.org
2019 IEEE/ACM 41st International Conference on Software …, 2019ieeexplore.ieee.org
A well-known approach to statically analyze libraries without having access to their client
code is to model all possible clients abstractly using a most-general client. In dynamic
languages, however, a most-general client would be too general: it may interact with the
library in ways that are not intended by the library developer and are not realistic in actual
clients, resulting in useless analysis results. In this work, we explore the concept of a
reasonably-most-general client, in the context of a new static analysis tool REAGENT that …
A well-known approach to statically analyze libraries without having access to their client code is to model all possible clients abstractly using a most-general client. In dynamic languages, however, a most-general client would be too general: it may interact with the library in ways that are not intended by the library developer and are not realistic in actual clients, resulting in useless analysis results. In this work, we explore the concept of a reasonably-most-general client, in the context of a new static analysis tool REAGENT that aims to detect errors in TypeScript declaration files for JavaScript libraries. By incorporating different variations of reasonably-most-general clients into an existing static analyzer for JavaScript, we use REAGENT to study how different assumptions of client behavior affect the analysis results. We also show how REAGENT is able to find type errors in real-world TypeScript declaration files, and, once the errors have been corrected, to guarantee that no remaining errors exist relative to the selected assumptions.
ieeexplore.ieee.org