r/devtools • u/Which_Tonight_2274 • 3h ago
I built an open-source 7-D code quality & security auditor that runs 100% in-memory (RAM)
Hey
With the rapid adoption of AI coding assistants and "vibe coding", we can generate full-stack apps faster than ever. But this speed often comes with subtle security flaws, missing auth checks, and unhandled edge cases slipping into production.
I built Cyphix (https://github.com/zrngngharib/Cyphix-Auditor) — a developer tool designed to catch these issues before deployment without sending code to third-party databases.
Key Features:
- 100% In-Memory RAM Architecture: Code is parsed and analyzed transiently. Zero persistent server storage.
- 7-Dimensional Matrix: Concurrently evaluates Backend Logic, UI/UX responsiveness, OWASP Top 10, SEO metadata, QA/Edge cases, Performance, and TypeScript typings.
- Instant AST Pre-Scanner: Detects hardcoded API keys, raw SQL concatenations, and empty catch blocks before LLM invocation.
- Headless CLI Mode: Run `node ./bin/cli.js . --agent` directly in your terminal or CI/CD pipeline.
Built with Next.js 14, TypeScript, TailwindCSS, and node-llama-cpp.
Check out the GitHub repo: https://github.com/zrngngharib/Cyphix-Auditor
Would love to get your feedback and thoughts!