用 Jev 与 CodeGraph 组合做安全审查
开发者分享了 typesafe-security-review 项目:把 Jev 的概率判断与代码图、OWASP/CWE 信息结合,用于低成本安全扫描。
该帖讨论了Jev模型在安全问卷响应分类(已实施/不适用/未实施)中的表现,与Claude对比,指出Jev需要调优以获得更准确的结果。
#Jev security questionnaire response categorization (implemented, N/A, not implemented) given the question+response then a ground truth eval. - Claude initially performed better with little direction - Jev questions needed tuning to provide a more accurate response. Once tuned,