@suhteevah

perfguard scans codebases for 40+ performance anti-patterns across python, javascript, ruby, and java, detecting n+1 queries, sync i/o, missing pagination, and memory leaks with local regex-based analysis and tiered reporting via git hooks and audit reports.

configsafe audits infrastructure configurations (dockerfiles, kubernetes, terraform, ci/cd) against 80+ security patterns with local scanning, exit codes for ci integration, and tiered licensing for hooks, benchmarks, and custom policies.

cryptolint detects cryptographic anti-patterns across codebases via regex matching against 90 patterns in 6 categories. it flags deprecated algorithms, hardcoded keys, insecure modes, weak rng, timing leaks, and tls misconfigurations with actionable remediation and letter-grade scoring.

gqllint detects graphql anti-patterns across 6 categories via regex matching, supporting 30-90 patterns depending on tier. covers query depth, resolver n+1, over/under fetching, auth gaps, schema design, and client safety with local scanning and markdown/json/html reporting.

deadcode scans javascript, typescript, python, go, and css for dead code, unused exports, orphan files, and unreachable code across 60+ detection patterns. free tier scans up to 5 files; pro and team tiers add git hooks, markdown reports, and sarif output.

asyncguard detects 90 async/await anti-patterns across promise misuse, resource leaks, event loop blocking, cancellation gaps, error handling, and coordination issues via regex scanning with tiered access and local-only processing.

eventlint detects 90 event-driven architecture anti-patterns across kafka, rabbitmq, sqs, nats, and redis pub/sub using regex matching, with three tier levels offering 30 to 90 patterns and output formats ranging from text to json and html.

containerlint scans dockerfiles and container configs for 90 security anti-patterns across 6 categories (dockerfile practices, security context, health checks, resource limits, networking, orchestration). outputs markdown reports with severity grades and remediation guidance. local-only, no telemetry.

regexguard scans codebases for regex anti-patterns across 6 categories (catastrophic backtracking, portability, correctness, maintainability, anchoring, injection) with tiered pattern access (30-90 patterns) and local-only analysis. produces markdown, json, and html reports with severity-based scoring.

bundlephobia analyzes js/ts projects for bundle bloat across 90+ patterns, detecting oversized dependencies, tree-shaking failures, and configuration issues. free tier requires no setup; pro and team tiers unlock git hooks, detailed reports, and ci integration.

claude-local-bridge provides approval-gated file access to local repositories via mcp, allowing claude on mobile devices to read and edit code with explicit human consent and audit logging.

Authentication & authorization pattern analyzer — finds missing auth checks, insecure sessions, broken access control, CSRF gaps, and token handling vulnerab...

Scheduled task & cron job anti-pattern analyzer -- detects overlapping execution risks, timezone scheduling errors, missing error recovery, resource contenti...

Pre-commit secret detection — block leaked credentials, API keys, and .env files before they hit git

API endpoint security auditor — scans route definitions for missing auth, rate limiting, CORS issues, and input validation holes

Generate and auto-sync documentation from code with git hooks; detect and fix doc drift using tree-sitter parsing and semantic diffs locally.

Scan project dependencies for vulnerabilities, license compliance, and generate security or compliance reports using native package manager audits.