2021-12-14T22:52:45Z
static analysis
Static code analysis involves parsing software code out to AST and tracing the various references throughout. It less resource-intensive and less dangerous (when the code is not trusted) but ultimately less powerful than generating a call graph, because it only identifies code that may be run (and even then potentially not even all of it), instead of code that actually is run.