System and method for implementing a code audit tool

Patent metadata

Field	Value
Publication number	US-2021406004-A1
Application number	US-202117340436-A
Country	US
Kind code	A1
Filing date	Jun 7, 2021
Priority date	Jun 25, 2020
Publication date	Dec 30, 2021
Grant date	—

Abstract

An embodiment of the present invention is directed to a code audit tool that intelligently analyzes and profiles code, such as Python code, based on a variety of previously unmeasured factors and metrics including a set of software dimensions, such as Algorithmic Complexities; Software Sizing Metrics; Anti-Pattern Implementations; Maintainability Metrics; Dependency Mappings; Runtime Metrics; Testing Metrics; and Security Metrics. Once this analysis is complete, a standardized report card or other scoring interface may be generated. This may include analytical findings as well as suggestions and recommend steps so that developers can make informed decisions, enhance their code bases and improve the score assigned to their code.

First claim

What is claimed is:

1 . A system that implements a code audit tool, the system comprising:
an interactive user interface that interacts with one or more users through a communication network; a memory component that stores industry standard for software development; and a computer processor, coupled to the interactive user interface and the memory component and is programmed to perform the steps of:
identifying, via an electronic input, a file that comprises a set of code;
retrieving, from the file, the set of code;
analyzing the set of code by invoking an optimal series of processes comprising: an Algorithmic Complexities process; a Software Sizing Metrics process; an Anti-Pattern Implementations process; a Maintainability Metrics process; a Dependency Mappings process; a Runtime Metrics process; a Testing Metrics process; and a Security Metrics;
generating a code health determination based on the optimal series of processes prior to deployment of the set of code;
generating, via the interactive user interface, a standardized output based on the optimal series of processes, the standardized output further comprising one or more code suggestions and recommended changes; and
receiving at least one input responsive to the one or more code suggestions and recommended changes to improve the code health determination.

2 . The system of claim 1 , wherein the set of code is Python code.

3 . The system of claim 1 , wherein the Algorithmic Complexities process determines an amount of compute resources required to execute at least a portion of the set of code.

4 . The system of claim 1 , wherein the Software Sizing Metrics process identifies a number of distinct operators and operands associated with the set of code.

5 . The system of claim 1 , wherein the Anti-Pattern Implementations process identifies one or more violations in recommended coding conventions.

6 . The system of claim 1 , wherein the Maintainability Metrics process estimates technical debt based on one or more runtime metrics.

7 . The system of claim 1 , wherein the Dependency Mappings process analyzes dependencies on computer resources and coding resources.

8 . The system of claim 1 , wherein the Runtime Metrics process indicates behavior and performance of at least a portion of the set of code.

9 . The system of claim 1 , wherein the Testing Metrics process executes a set of automates tests that ensure at least a portion of the set of code behaves as expected.

10 . The system of claim 1 , wherein the Security Metrics process identifies vulnerabilities and insecure code instances in at least a portion of the set of code.

11 . A method that implements a code audit tool, the method comprising the steps of:
identifying, via an electronic input, a file that comprises a set of code; retrieving, from the file, the set of code; analyzing, via an analysis engine comprising a computer processor, the set of code by invoking an optimal series of processes comprising: an Algorithmic Complexities process; a Software Sizing Metrics process; an Anti-Pattern Implementations process; a Maintainability Metrics process; a Dependency Mappings process; a Runtime Metrics process; a Testing Metrics process; and a Security Metrics; generating a code health determination based on the optimal series of processes prior to deployment of the set of code; generating, via an interactive user interface, a standardized output based on the optimal series of processes, the standardized output further comprising one or more code suggestions and recommended changes; and receiving at least one input responsive to the one or more code suggestions and recommended changes to improve the code health determination.

12 . The method of claim 11 , wherein the set of code is Python code.

13 . The method of claim 11 , wherein the Algorithmic Complexities process determines an amount of compute resources required to execute at least a portion of the set of code.

14 . The method of claim 11 , wherein the Software Sizing Metrics process identifies a number of distinct operators and operands associated with the set of code.

15 . The method of claim 11 , wherein the Anti-Pattern Implementations process identifies one or more violations in recommended coding conventions.

16 . The method of claim 11 , wherein the Maintainability Metrics process estimates technical debt based on one or more runtime metrics.

17 . The method of claim 11 , wherein the Dependency Mappings process analyzes dependencies on computer resources and coding resources.

18 . The method of claim 11 , wherein the Runtime Metrics process indicates behavior and performance of at least a portion of the set of code.

19 . The method of claim 11 , wherein the Testing Metrics process executes a set of automates tests that ensure at least a portion of the set of code behaves as expected.

20 . The method of claim 11 , wherein the Security Metrics process identifies vulnerabilities and insecure code instances in at least a portion of the set of code.

Assignees

• Jpmorgan Chase Bank Na

Inventors

• Ray Rajat
• Bhalla Navnidh

Classifications

• G06F8/75 Primary

  Structural analysis for program understanding · CPC title

• G06F8/77 Primary

  Software metrics · CPC title

• G06F8/751

  Code clone detection · CPC title