More on the topic...
Generating detailed summary...
Failed to generate summary. Please try again.
Quodeq v1.0.6 is an open-source tool under the MIT license that runs locally without telemetry or accounts. It uses AI to scan any codebase across six ISO 25010 dimensions—Security, Reliability, Maintainability, Performance, Flexibility, Usability—and maps every issue to a CWE identifier. You get letter grades (A–F), numeric scores, violation details with file paths and line numbers, and step-by-step fix plans. You can choose cloud providers (Claude, Gemini, Codex) for speed or run local models via Ollama for privacy.
A sample report shows a critical SQL injection in src/db.py (line 15), a high-severity hardcoded credential in src/auth.py (line 42), a medium-severity missing rate limiter in src/api.py (line 88), and a minor bare-except clause in src/utils.py (line 23). All findings include the exact code snippet, the CWE reference, reasons for the flag, and a recommended fix. Results export as JSON on your machine and persist across runs in ~/.quodeq/evaluations/.
Installation is simple: pipx install quodeq or pip install quodeq, then run quodeq or quodeq dashboard to open the Electron UI. The dashboard offers a heatmap of issue concentration, per-dimension trend graphs, a violations explorer, and support for custom standards. You can import or build your own evaluation schemas, including Clean Architecture or Domain-Driven Design rules, via JSON files.
You launch scans from the UI or CLI: quodeq evaluate /path/to/project with flags to limit scope (–scope src/api) or dimensions (-d security). Requirements are Python 3.12+ and Node.js 18+ for the UI. For Mac users there’s a .dmg in Releases; you’ll need xattr -cr to bypass unsigned-app warnings. The code lives on GitHub—clone, run pytest—and details on scoring formulas and release notes are in the docs.
Questions about this article
No questions yet.