Checking correctness of TypeScript interfaces for JavaScript libraries

Feldthaus, Asger; Møller, Anders

doi:10.1145/2660193.2660215

Cited by 34 publications

(8 citation statements)

References 12 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…TSInfer and TSEvolve are presented as part of TSTools [8]. Both tools are the continuation of TSCheck [5], a tool for detecting mismatches between a declaration file and the implementation of the module.…”

Section: Related Workmentioning

confidence: 99%

See 1 more Smart Citation

Generation of TypeScript declaration files from JavaScript code

Cristiani

Thiemann

2021

Proceedings of the 18th ACM SIGPLAN International Conference on Managed Programming Languages and Runtimes

View full text Add to dashboard Cite

Developers are starting to write large and complex applications in TypeScript, a typed dialect of JavaScript. TypeScript applications integrate JavaScript libraries via typed descriptions of their APIs called declaration files. DefinitelyTyped is the standard public repository for these files. The repository is populated and maintained manually by volunteers, which is error-prone and time consuming. Discrepancies between a declaration file and the JavaScript implementation lead to incorrect feedback from the TypeScript IDE and, thus, to incorrect uses of the underlying JavaScript library.This work presents dts-generate, a tool that generates TypeScript declaration files for JavaScript libraries uploaded to the NPM registry. It extracts code examples from the documentation written by the developer, executes the library driven by the examples, gathers run-time information, and generates a declaration file based on this information. To evaluate the tool, 249 declaration files were generated directly from an NPM module and 111 of these were compared with the corresponding declaration file provided on Defi-nitelyTyped. All these files either exhibited no differences at all or differences that can be resolved by extending the developer-provided examples.CCS Concepts: • Software and its engineering → General programming languages; Development frameworks and environments.

show abstract

Section: Related Workmentioning

confidence: 99%

“…The NPM package glob-to-regexp provides functionality to turn a glob expression for matching filenames in the shell into a regular expression 5 . It has about 9.9M weekly downloads and 188 NPM packages depend on it.…”

Section: Motivating Examplementioning

confidence: 99%

Generation of TypeScript declaration files from JavaScript code

Cristiani

Thiemann

2021

Proceedings of the 18th ACM SIGPLAN International Conference on Managed Programming Languages and Runtimes

View full text Add to dashboard Cite

show abstract

“…The existing literature covers a wide range of analysis techniques for JavaScript programs, including: type systems [Anderson et al 2005;Bierman et al 2014;Feldthaus and Mùller 2014;Jensen et al 2009;Microsoft 2014;Rastogi et al 2015;Thiemann 2005], control flow analysis [Feldthaus et al 2013], pointer analysis [Jang and Choe 2009;Sridharan et al 2012] and abstract interpretation [Andreasen and Mùller 2014;Jensen et al 2009;Kashyap et al 2014;Park and Ryu 2015], among others. In contrast, there has been comparatively little work on logic-based verification of JavaScript programs.…”

Section: Related Workmentioning

confidence: 99%

JaVerT: JavaScript verification toolchain

Santos

Maksimovic

Naudžiūnienė

et al. 2017

Proc. ACM Program. Lang.

View full text Add to dashboard Cite

The dynamic nature of JavaScript and its complex semantics make it a difficult target for logic-based verification. We introduce JaVerT, a semi-automatic JavaScript Verification Toolchain, based on separation logic and aimed at the specialist developer wanting rich, mechanically verified specifications of critical JavaScript code. To specify JavaScript programs, we design abstractions that capture its key heap structures (for example, prototype chains and function closures), allowing the developer to write clear and succinct specifications with minimal knowledge of the JavaScript internals. To verify JavaScript programs, we develop JaVerT, a verification pipeline consisting of: JS-2-JSIL, a well-tested compiler from JavaScript to JSIL, an intermediate goto language capturing the fundamental dynamic features of JavaScript; JSIL Verify, a semi-automatic verification tool based on a sound JSIL separation logic; and verified axiomatic specifications of the JavaScript internal functions. Using JaVerT, we verify functional correctness properties of: data-structure libraries (key-value map, priority queue) written in an object-oriented style; operations on data structures such as binary search trees (BSTs) and lists; examples illustrating function closures; and test cases from the official ECMAScript test suite. The verification times suggest that reasoning about larger, more complex code using JaVerT is feasible. INTRODUCTIONSeparation logic was developed in order to reason about programs that manipulate data structures in the heap. The reasoning has been shown to be tractable, with compositional techniques that scale [Reynolds 2002] and properly engineered tools applied to real-world code. In particular, separation logic has been used to reason about programs written in static languages: for example, the semi-automatic verification tool Verifast [Jacobs et al. 2011] for reasoning about C and Java Authors' addresses: José Fragoso Santos, Imperial College London, UK, jose.fragoso.santos@imperial.ac.uk; Petar Maksimović, Imperial College London, UK, petar.maksimovic@imperial.ac.uk, Mathematical Institute SASA, Serbia; Daiva Naudžiūnienė, Imperial College London, UK, daiva.naudziuniene@imperial.ac.uk; Thomas Wood, Imperial College London, UK, thomas.wood@imperial.ac.uk; Philippa Gardner, Imperial College London, UK, p.gardner@imperial.ac.uk.Permission to make digital or hard copies of part or all of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. Copyrights for third-party components of this work must be honored. For all other uses, contact the owner/author(s). 50:2 J. Fragoso Santos, P. Maksimović, D. Naudžiūnienė, T. Wood, P. Gardner programs; the automatic verification tool Infer [Calcagno et al. 2015], being developed at Facebook, for reasoning about C, Java, C++ and Objective C programs; and the interactive Coq development for reasoning about, f...

show abstract

“…Feldthaus et al's TSCHECK [10] is a tool to check the correctness of TypeScript interfaces for JavaScript libraries. TSCHECK discovers a library's API by taking a snapshot after executing the library's top-level code.…”

Section: Related Workmentioning

confidence: 99%

Just-in-time static type checking for dynamic languages

Ren

Foster

2016

SIGPLAN Not.

View full text Add to dashboard Cite

Dynamic languages such as Ruby, Python, and JavaScript have many compelling benefits, but the lack of static types means subtle errors can remain latent in code for a long time. While many researchers have developed various systems to bring some of the benefits of static types to dynamic languages, prior approaches have trouble dealing with metaprogramming, which generates code as the program executes. In this paper, we propose Hummingbird, a new system that uses a novel technique, just-in-time static type checking, to type check Ruby code even in the presence of metaprogramming. In Hummingbird, method type signatures are gathered dynamically at run-time, as those methods are created. When a method is called, Hummingbird statically type checks the method body against current type signatures. Thus, Hummingbird provides thorough static checks on a per-method basis, while also allowing arbitrarily complex metaprogramming. For performance, Hummingbird memoizes the static type checking pass, invalidating cached checks only if necessary. We formalize Hummingbird using a core, Ruby-like language and prove it sound. To evaluate Hummingbird, we applied it to six apps, including three that use Ruby on Rails, a powerful framework that relies heavily on metaprogramming. We found that all apps typecheck successfully using Hummingbird, and that Hummingbird's performance overhead is reasonable. We applied Hummingbird to earlier versions of one Rails app and found several type errors that had been introduced and then fixed. Lastly, we demonstrate using Hummingbird in Rails development mode to typecheck an app as live updates are applied to it.

show abstract

Checking correctness of TypeScript interfaces for JavaScript libraries

Cited by 34 publications

References 12 publications

Generation of TypeScript declaration files from JavaScript code

Generation of TypeScript declaration files from JavaScript code

JaVerT: JavaScript verification toolchain

Just-in-time static type checking for dynamic languages

Contact Info

Product

Resources

About