1 link tagged with all of: static-analysis + ai-security + iso-25010 + code-quality
Click any tag below to further narrow down your results
Links
Quodeq is an MIT-licensed tool that runs locally to scan codebases using AI across six ISO 25010 dimensions, mapping each finding to CWE identifiers and providing fix plans. It supports cloud and local models, outputs grades and violations in JSON, and includes a dashboard for exploring results and defining custom standards.
- Quodeq is a free, local, MIT-licensed AI scanner that grades code A–F across six ISO 25010 dimensions and maps findings to CWE IDs with concrete fix plans.
- It works with either cloud models (Claude, Gemini, Codex) or fully local models via Ollama, so scans can run with no telemetry or accounts.
- Sample output catches real-world issues like SQL injection, hardcoded credentials, missing rate limiting, and bare-except clauses, each with file/line references and code snippets.
- Install via pipx/pip and run from CLI or an Electron dashboard with heatmaps, trend graphs, and support for custom rule sets like Clean Architecture or DDD.