@suhteevah

cryptolint detects cryptographic anti-patterns across codebases via regex matching against 90 patterns in 6 categories. it flags deprecated algorithms, hardcoded keys, insecure modes, weak rng, timing leaks, and tls misconfigurations with actionable remediation and letter-grade scoring.

gqllint detects graphql anti-patterns across 6 categories via regex matching, supporting 30-90 patterns depending on tier. covers query depth, resolver n+1, over/under fetching, auth gaps, schema design, and client safety with local scanning and markdown/json/html reporting.

deadcode scans javascript, typescript, python, go, and css for dead code, unused exports, orphan files, and unreachable code across 60+ detection patterns. free tier scans up to 5 files; pro and team tiers add git hooks, markdown reports, and sarif output.

asyncguard detects 90 async/await anti-patterns across promise misuse, resource leaks, event loop blocking, cancellation gaps, error handling, and coordination issues via regex scanning with tiered access and local-only processing.

containerlint scans dockerfiles and container configs for 90 security anti-patterns across 6 categories (dockerfile practices, security context, health checks, resource limits, networking, orchestration). outputs markdown reports with severity grades and remediation guidance. local-only, no telemetry.

regexguard scans codebases for regex anti-patterns across 6 categories (catastrophic backtracking, portability, correctness, maintainability, anchoring, injection) with tiered pattern access (30-90 patterns) and local-only analysis. produces markdown, json, and html reports with severity-based scoring.

bundlephobia analyzes js/ts projects for bundle bloat across 90+ patterns, detecting oversized dependencies, tree-shaking failures, and configuration issues. free tier requires no setup; pro and team tiers unlock git hooks, detailed reports, and ci integration.

claude-local-bridge provides approval-gated file access to local repositories via mcp, allowing claude on mobile devices to read and edit code with explicit human consent and audit logging.

Authentication & authorization pattern analyzer — finds missing auth checks, insecure sessions, broken access control, CSRF gaps, and token handling vulnerab...

Event & message queue anti-pattern analyzer -- detects producer/consumer issues, schema problems, dead letter queue gaps, ordering failures, and observabilit...

Scheduled task & cron job anti-pattern analyzer -- detects overlapping execution risks, timezone scheduling errors, missing error recovery, resource contenti...

Pre-commit secret detection — block leaked credentials, API keys, and .env files before they hit git

Performance anti-pattern scanner — finds N+1 queries, sync I/O, missing pagination, and memory leaks before they hit production

Infrastructure configuration auditor — scans Dockerfiles, K8s manifests, Terraform, and CI/CD pipelines for security misconfigurations

API endpoint security auditor — scans route definitions for missing auth, rate limiting, CORS issues, and input validation holes

Generate and auto-sync documentation from code with git hooks; detect and fix doc drift using tree-sitter parsing and semantic diffs locally.

Scan project dependencies for vulnerabilities, license compliance, and generate security or compliance reports using native package manager audits.