Click any tag below to further narrow down your results
Links
Quodeq is an MIT-licensed tool that runs locally to scan codebases using AI across six ISO 25010 dimensions, mapping each finding to CWE identifiers and providing fix plans. It supports cloud and local models, outputs grades and violations in JSON, and includes a dashboard for exploring results and defining custom standards.
- Quodeq is a free, local, MIT-licensed AI scanner that grades code A–F across six ISO 25010 dimensions and maps findings to CWE IDs with concrete fix plans.
- It works with either cloud models (Claude, Gemini, Codex) or fully local models via Ollama, so scans can run with no telemetry or accounts.
- Sample output catches real-world issues like SQL injection, hardcoded credentials, missing rate limiting, and bare-except clauses, each with file/line references and code snippets.
- Install via pipx/pip and run from CLI or an Electron dashboard with heatmaps, trend graphs, and support for custom rule sets like Clean Architecture or DDD.
Quodeq is an AI agent that inspects your codebase using read-only tools, scores it against the six ISO 25010 quality dimensions, and maps issues to CWE classifications. It rewards good code as well as flags violations, then generates exact fixes you can paste into your IDE or AI assistant. You can run it offline with Ollama or connect to cloud models without sending your code offsite.
- Quodeq scores code with a Q² formula that rewards good patterns instead of just penalizing violations, mapping issues to ISO 25010 dimensions and CWE identifiers with exact fixes
- Runs fully local via Ollama or connects to cloud models (Claude, Codex, Gemini) without sending code offsite
- MIT licensed and fully open for inspection, extension, and custom quality criteria beyond the built-in ISO 25010/CWE checks
- Builds a structural model of the codebase across multiple languages/frameworks rather than acting as a simple linter