The Now Open Source Microsoft Application Inspector Will Help You Probe Third Party Components
“How well do you understand what all those external software components actually do?” it poses. “You may find that you’re placing as much trust in each of the thousands of contributors to those components as you have in your in-house engineering team.” The tool is built on .NET Core, and as such runs across Linux, Windows, and macOS. However, Microsoft touts other benefits over static analysis tools. Firstly, Application Inspector doesn’t just flag bad practices – it displays all characteristics it has analyzed as interesting so that a human can review them....