JavaScript Static Analysis Tools for Medical Devices

The focus of this paper is on software applications (Apps) written in Javascript that meet the Food and Drug Administration’s (FDA) regulatory definition of a medical device. Because medical devices are used to treat, diagnose, deliver therapy, etc. their use may result in patient harm, ranging from minor injuries to death. Therefore, freedom from unacceptable risk (safety) is an imperative, and security is a subset of safety.

• Three layers of software tools to keep your code safe
• List of common JavaScript risks to look out for
• Best practices for JavaScript risk mitigation and third-party dependencies