Plugin
codebase-audit
Produces a thorough, evidence-based software quality assessment of any git repository. Grades 16 dimensions — architecture, security, database design, observability, testing, disaster recovery, GDPR, dependencies, frontend bundle, and CI/CD speed — with file:line citations so every finding is verifiable in under a minute. Works on any language (Python, TypeScript, Go, Rust, Java, Ruby, PHP, C#, etc.).
- Analysed
- Last observed
What the code does
- Refers to credential files Code that names files such as SSH keys or cloud credentials.
Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.
This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.
Risk
Sign in to see this tool's overall risk level and what drives it. Free.
Coverage
Detailed report
3 findings from automated static analysis of the latest version, with severities and explanations.
Using this tool across your team? We can assess your whole inventory.
Request an inventory assessment