Verune

Plugin

brooks-lint

Code quality diagnosis using principles from six classic software engineering books (The Mythical Man-Month, Clean Code, A Philosophy of Software Design, Working Effectively with Legacy Code, xUnit Test Patterns, The Art of Unit Testing). Surfaces decay risks across four review modes: PR Review, Architecture Audit, Tech Debt Assessment, and Test Quality Review. Every finding follows the Iron Law: Symptom → Source → Consequence → Remedy — grounding each issue in a named principle from the books.

Analysed
Last observed

What the code does

  • Downloads and runs code Code that fetches a script and pipes it into a shell.
  • Runs hooks automatically Hooks that execute without being called explicitly.
  • Reads AI and developer logins Code that refers to AI tool credentials or publishing tokens, such as .npmrc.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.

Risk

Sign in to see this tool's overall risk level and what drives it. Free.

Sign in to see the risk level

Coverage

Complete static analysis

How coverage is measured

Detailed report

3 findings from automated static analysis of the latest version, with severities and explanations.

Sign in to view detailed report

Using this tool across your team? We can assess your whole inventory.

Request an inventory assessment