deslop 0.2.0

A static analyzer that spots low-context and AI-assisted code patterns across naming, concurrency, security, performance, and test quality.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118

use super::{
    RuleConfigurability, RuleDefaultSeverity, RuleDefinition, RuleLanguage, RuleStatus, bindings,
};

pub(crate) const RULE_DEFINITIONS: &[RuleDefinition] = &[
    RuleDefinition {
        id: "rust_debug_secret",
        language: RuleLanguage::Rust,
        family: "domain_modeling",
        default_severity: RuleDefaultSeverity::Contextual,
        status: RuleStatus::Stable,
        configurability: &[
            RuleConfigurability::Disable,
            RuleConfigurability::Ignore,
            RuleConfigurability::SeverityOverride,
        ],
        description: "Debug is derived on a type that carries secret-like fields.",
        binding_location: bindings::RUST_DOMAIN_MODELING,
    },
    RuleDefinition {
        id: "rust_domain_default_produces_invalid",
        language: RuleLanguage::Rust,
        family: "domain_modeling",
        default_severity: RuleDefaultSeverity::Contextual,
        status: RuleStatus::Stable,
        configurability: &[
            RuleConfigurability::Disable,
            RuleConfigurability::Ignore,
            RuleConfigurability::SeverityOverride,
        ],
        description: "Default is derived or implemented on a type that likely cannot have a safe default state.",
        binding_location: bindings::RUST_DOMAIN_MODELING,
    },
    RuleDefinition {
        id: "rust_domain_float_for_money",
        language: RuleLanguage::Rust,
        family: "domain_modeling",
        default_severity: RuleDefaultSeverity::Contextual,
        status: RuleStatus::Stable,
        configurability: &[
            RuleConfigurability::Disable,
            RuleConfigurability::Ignore,
            RuleConfigurability::SeverityOverride,
        ],
        description: "Floating-point storage is used for money-like values.",
        binding_location: bindings::RUST_DOMAIN_MODELING,
    },
    RuleDefinition {
        id: "rust_domain_impossible_combination",
        language: RuleLanguage::Rust,
        family: "domain_modeling",
        default_severity: RuleDefaultSeverity::Contextual,
        status: RuleStatus::Stable,
        configurability: &[
            RuleConfigurability::Disable,
            RuleConfigurability::Ignore,
            RuleConfigurability::SeverityOverride,
        ],
        description: "A boolean toggle is mixed with optional credentials, creating invalid-state combinations.",
        binding_location: bindings::RUST_DOMAIN_MODELING,
    },
    RuleDefinition {
        id: "rust_domain_optional_secret_default",
        language: RuleLanguage::Rust,
        family: "domain_modeling",
        default_severity: RuleDefaultSeverity::Contextual,
        status: RuleStatus::Stable,
        configurability: &[
            RuleConfigurability::Disable,
            RuleConfigurability::Ignore,
            RuleConfigurability::SeverityOverride,
        ],
        description: "A defaultable type includes optional secret-like fields, which can hide invalid configuration.",
        binding_location: bindings::RUST_DOMAIN_MODELING,
    },
    RuleDefinition {
        id: "rust_domain_raw_primitive",
        language: RuleLanguage::Rust,
        family: "domain_modeling",
        default_severity: RuleDefaultSeverity::Contextual,
        status: RuleStatus::Stable,
        configurability: &[
            RuleConfigurability::Disable,
            RuleConfigurability::Ignore,
            RuleConfigurability::SeverityOverride,
        ],
        description: "Business-facing data is stored as a raw primitive instead of a stronger domain type.",
        binding_location: bindings::RUST_DOMAIN_MODELING,
    },
    RuleDefinition {
        id: "rust_serde_sensitive_deserialize",
        language: RuleLanguage::Rust,
        family: "domain_modeling",
        default_severity: RuleDefaultSeverity::Contextual,
        status: RuleStatus::Stable,
        configurability: &[
            RuleConfigurability::Disable,
            RuleConfigurability::Ignore,
            RuleConfigurability::SeverityOverride,
        ],
        description: "Deserialize is derived for sensitive fields without obvious validation.",
        binding_location: bindings::RUST_DOMAIN_MODELING,
    },
    RuleDefinition {
        id: "rust_serde_sensitive_serialize",
        language: RuleLanguage::Rust,
        family: "domain_modeling",
        default_severity: RuleDefaultSeverity::Contextual,
        status: RuleStatus::Stable,
        configurability: &[
            RuleConfigurability::Disable,
            RuleConfigurability::Ignore,
            RuleConfigurability::SeverityOverride,
        ],
        description: "Serialize is derived for secret-like fields that may need redaction or exclusion.",
        binding_location: bindings::RUST_DOMAIN_MODELING,
    },
];