Plugin

api-contract-forge

: Build production-ready API endpoints with proper contracting for any tech stack, or analyze existing API responses to generate typed contracts. Supports Express, NestJS, FastAPI, Django, Go, Spring Boot, Laravel, and Rails. Auto-detects your project's framework, validation library, and ORM, then scaffolds CRUD endpoints with validation schemas, Swagger docs, RBAC permissions, and a compliance checklist (OWASP, RFC 9457). In analyze mode, paste any JSON response to infer types, detect inconsistencies, and generate contracts in TypeScript, Zod, Pydantic, Dart, Kotlin, Swift, OpenAPI 3.1, or JSON Schema.

• Published source
• Repository

Analysed

11 October 2026

Last observed

12 October 2026

What the code does

Static analysis found none of the capabilities we track, such as shell commands, network requests or file writes, in the latest version.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.