Bashka is a static analyzer for bash install scripts that validates safety before execution using the curl | bash pattern. It scores scripts against multiple checks, follows forwarded scripts, and categorizes findings from critically malicious to advisory levels, while maintaining a lockfile of installed packages for management and removal.
Archkeel is a tool that ensures coding agents declare architecture changes before submitting code, using deterministic checks that compare accepted commits against candidates while tracking both finding counts and measurement regressions to catch architectural degradation that traditional diff-based tools miss.
reqlan is a semantic engineering toolset that lets developers write requirement graphs alongside code using a domain-specific language, enabling better system specifications, static analysis, and integration of compliance and testing into codebase documentation. Built in Rust, it aims to reduce AI context tokens, prevent documentation drift, and make system intent explicit and compilable through file references, cross-linking, and structured requirement blocks.
Weftgate is a local CLI tool that verifies code connections written by AI agents, catching errors like typos in environment variables, missing imports, and broken route handlers before deployment. It runs offline without API keys or runtime dependencies and integrates with agents, GitHub Actions, and MCP servers.
Sirius is a new imperative programming language designed for array operations that uses a type system with polynomial-bounded refinements to eliminate runtime shape errors and bounds checks. The language enables static verification of tensor shapes and array accesses without requiring complex refinement types, making it particularly useful for avoiding the tensor manipulation issues common in frameworks like PyTorch.