Please enable JavaScript.

Coggle requires JavaScript to display documents.

Scoping Information (Tool (Code Metrics (normalized SLOC, Nr. of Contracts…

- - - - A-F school mark ratings for complexity categories
      - aggregate lines of code
      - files considered
    - - metrics per file
      - aggregate metrics
  - - - name of the project
      - (subjective) complexity
      - (subjective) risk
      - project contact
    - - exclude
        
        *mock* in Filename or Dirname or contract name
        
        *test* in Filename or Dirname or contract name
        
        user provided list of dirs to ignore
        
        audited codebases (openzeppelin, etc.)
    - - Truffle
      - Embark
      - custom
- - - - multiple years - established
      - multiple months - rather new
    - - alpha/beta - under heavy development (expect lots of last minute changes)
      - release candidate - settled (expect some last minute changes)
      - release managed - dont expect big surprises or overhead
  - - - Framework / Library / Platform / Ecosystem / Operating System
      - Application
    - - open
      - closed
    - - manages large amount of funds
      - manages identities / trust to other systems
      - serves as a basic buildingblock for others to build their applications on
      - <list properties/patterns that commonly introduce risks>
      - expected amount of users using application/platform
      - any sensitive information/action to be protected?
      - live system?
      - how expensive is it to upgrade the system? is it planned
    - - the systems complexity (rated in A-F give examples)
      - the threat model
    - - available and maintained?
      - specification available and maintained?
    - - How clear are the project goals?
      - Is there any major blockers (that might delay our audit)