getdev

getdev is a free, open-source command-line tool designed to verify, secure, and prepare AI-generated code for deployment. It addresses common issues found in code produced by AI coding agents, such as hallucinated package imports, hardcoded secrets, missing authentication middleware, and leftover debug code. The tool operates locally as a single static binary, ensuring that no code or telemetry is uploaded or shared externally; the only network activity involves checking package registries and self-updates, which can be disabled for offline use.

The platform provides a suite of seven commands, including checks for dependency validity, security audits tailored to AI-generated code failure patterns, static analysis for dead code and agent debris, extraction and safe handling of hardcoded secrets, and pre-flight deployment validation. Its core command, 'getdev check', runs a comprehensive analysis and produces a Ship Score from 0 to 100, summarizing the project's readiness and highlighting critical, high, medium, and low severity findings. Other commands verify the existence of packages and APIs, scan for security vulnerabilities, analyze diffs for agent-generated leftovers, extract secrets to environment files, create and restore project checkpoints, and prepare projects for shipping with Dockerfile generation and deployment checklists.

getdev is designed for developers working with AI-assisted codebases who need to ensure code quality and security before shipping. It uses pure static analysis, never executing user code unless explicitly requested, and all detection rules are expressed as YAML data, making it accessible for contributors without requiring Rust programming knowledge. The tool is deterministic by default, with no large language model calls in its core functionality; an optional semantic layer can be enabled with a user-provided key or local model.

The tool is distributed as a single binary with support for macOS, Linux, and Windows, and can be installed via shell script, npm, Homebrew, or Cargo. 0, with a stated policy of being free forever, no accounts or paid tiers, and contributions governed by DCO sign-off. Sponsorship is available to support development but does not influence features or findings.