Plugin
brooks-lint
Code quality diagnosis using principles from six classic software engineering books (The Mythical Man-Month, Clean Code, A Philosophy of Software Design, Working Effectively with Legacy Code, xUnit Test Patterns, The Art of Unit Testing). Surfaces decay risks across four review modes: PR Review, Architecture Audit, Tech Debt Assessment, and Test Quality Review. Every finding follows the Iron Law: Symptom → Source → Consequence → Remedy — grounding each issue in a named principle from the books.
- Analysed
- Last observed
What the code does
- Downloads and runs code Code that fetches a script and pipes it into a shell.
- Runs hooks automatically Hooks that execute without being called explicitly.
- Reads AI and developer logins Code that refers to AI tool credentials or publishing tokens, such as .npmrc.
Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.
This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.
Risk
Sign in to see this tool's overall risk level and what drives it. Free.
Coverage
Detailed report
3 findings from automated static analysis of the latest version, with severities and explanations.
Using this tool across your team? We can assess your whole inventory.
Request an inventory assessment