Solidity Visual Developer installs statistics

[ 🌐 📩 🔥 ]

Solidity Visual Developer

• Advanced Solidity Language Support • Code Augmentation • Source Exploration • Visual Security Linting

An extension that supports developers in writing secure and well understood code

This extension contributes security centric syntax and semantic highlighting, a detailed class outline, specialized views, advanced Solidity code insights and augmentation to Visual Studio Code.

⚠️ Note: Customize this extension to fit your needs! Show/Hide/Enable/Disable features in Preference → Settings → Solidity Visual Developer: solidity-va.*, select one of the customized security-aware color themes in Preferences → Color Themes.

We ❤ feedback → get in touch!

Marketplace: ext tintinweb.solidity-visual-auditor

Features

Semantic highlighting and solidity insights for passive security awareness. Most features are configurable (preferences -> Settings -> Solidity Visual Developer)

Themes (preferences -> Color Theme):

• Visual Auditor Dark - based on the "Atom One" theme • Visual Auditor Light (Visual Studio) - based on the standard "light (VSCode)" theme • Visual Auditor Solarized Light - based on the standard "Solarized Light" theme

Syntax Highlighting

• access modifiers (external, public, payable, ...) • security relevant built-ins, globals, methods and user/miner-tainted information (address.call(), tx.origin, msg.data, block.*, now) • storage access modifiers (memory, storage) • developer notes in comments (TODO, FIXME, HACK, ...) • custom function modifiers • contract creation / event invocations • easily differentiate between arithmetics vs. logical operations • make Constructor and Fallback function more prominent

Code fragments passively draw your attention to statements that typically reduce risk or need your attention .

Semantic Highlighting

• highlights StateVars (constant, inherited) • detects and alerts about StateVar shadowing • highlights function arguments in the function body

Review Features

• audit annotations/bookmarks - @audit - @audit-ok - (see below) • generic interface for importing external scanner results - cdili json format (see below) • codelens inline action: graph, report, dependencies, inheritance, parse, ftrace, flatten, generate unittest stub, function signature hashes, uml

Graph- and Reporting Features

• 💒🤵👰 vscode-solidity-auditor ⚭ Sūrya • access your favorite Sūrya features from within vscode! • interactive call graphs with call flow highlighting and more! • 📈🎉 auto-generate UML diagrams from code to support your threat modelling exercises or documentation!

Code Augmentation

• Hover over Ethereum Account addresses to download the byte-code, source-code or open it in the browser • Hover over ASM instructions to show their signatures • Hover over keywords to show basic Security Notes • Hover over StateVar's to show declaration information

Views

• Cockpit View • Explore and focus on solidity files in your workspace • Generate report/graphs for any files/folders selected in the explorer views • Selectively flatten files • Search for contracts that are likely to be deployed in the system • Context-sensitive views: click into a contract in the editor to list public state-changing method • Get quick access to extension settings • Outline View • populates VS Code outline view with sourceUnit and contract layout • contracts, stateVars, methods, inherited names • annotates security relevant information (visibility, ...) • calculates complexity rating • annotations functions with information about whether they are accessing stateVars

Installation

Method 1: Install by going to Visual Studio Market Place and click Install.

Method 2: Bring up the Extension view in VS Code and search for Solidity Visual Developer and click Install

Method 3 (Manual):

1. Download the latest compiled extension as *.vsix 2. Fire up Terminal and install the extension by running code --install-extension "solidity-visual-auditor-0.0.x.vsix" 3. vscode --> preferences --> color scheme --> Solidity Visual Developer Dark

Tour

Scroll down and take the tour.

• semantic highlighting for state variables (constant=green, statevar=golden, inherited=blue) • semantic highlighting for function arguments • outline view with security annotations and inherited names • tooltips (asm instruction signatures, security notes) • @audit tags • graph's and uml • generic interface to import issues from external scanners • Cockpit View

Feature: Ethereum Account Address Actions

Ethereum Account Address Actions

• open the account on etherscan.io • show the contract code • show the VerifiedContract source code • decompile the byte-code. requires vscode-decompiler

Feature: Semantic function argument highlighting

Semantic function argument highlighting

• arguments are assigned different colors in the scope of the function

Feature: Inline Bookmarks

Inline Bookmarks: @audit tags

This feature is provided by Inline Bookmarks.

• @audit - ... flag lines for security review or start a security review discussion • @audit-ok - ... flag that a line was checked for security or a security discussion on that line turned out to be a non-issue

Feature: Code Augmentation / Annotations / Hover / Tooltip

Code Augmentation / Annotations / Hover / Tooltip…