Subham Mazumdar@SubhamMazumdar

Solution Statement We propose a unified code-aware analysis system that connects source-code usage with dependency vulnerabilities. Key Components AST & Call Graph Engine Parses source files. Builds caller-callee relationships. Identifies unused or unreachable code. Dependency & Vulnerability Scanner Detects dependencies, versions, and known vulnerabilities. Collects vulnerability information from security scanners. Reachability Analysis Maps vulnerable dependencies to application code paths. Determines whether vulnerable functionality is actually reachable. LLM Analysis Interprets the collected results. Converts technical findings into understandable insights. Output Shows unused code, relevant vulnerabilities, reachable paths, impact, and recommended actions.

💻 Online Hackathon | ⏳ Build: 48 hours | 📅 September 25–27, 2026 The official IBM Bob 2.0 hackathon. Build what's next in AI-assisted development, alongside the developers and experts shaping it. ⭐ Get help from experts throughout the event 🤝 Join a team or build solo 💰 Prize pool: $12,000 🧑🏻‍💻 Register before the Kick-Off Stream to start building with Bob