Sonar's new JS/TS engine: Tracing meaning, not syntax, to hunt down real vulnerabilities

Static analysis grounded in the formal theory of program analysis, rather than in shallow, syntax-driven heuristics, can compute precise data-flow paths through real, unmodified production code.