ai-code-quality-reviewer

Builds the import graph of a codebase and reports circular dependencies, layer violations, coupling and instability per module, stable-dependencies…

Deep web research in the background on a decision question, a source (a paper, a repository or a web page) or an open topic.

Detects which architecture pattern a codebase follows (Layered, Hexagonal, Clean, Onion, CQRS, DDD, Vertical Slice, Modular Monolith, Microservices) with…

Auto-generates changelogs from commits and PRs — Keep a Changelog 1.1 + Conventional Commits, semver-driven, breaking-change-first, generated-and-curated…

Render pending decisions as a matrix with pros, cons, and — only for a decision that has an objectively best answer — one quality recommendation, then collect…

Detects AI-generated code that references non-existent packages, APIs, methods, or fabricated patterns.

Scans dependencies for license compliance, attribution gaps, and copyleft conflicts.

Updates API docs, README, code comments, and changelog entries.

Detects usage of deprecated APIs, libraries, and language features so teams can plan migrations.

SBOM correctness, signing, retention, and EU Cyber Resilience Act (CRA) vulnerability-reporting readiness — validates SPDX 2.3+/CycloneDX 1.6+ against NTIA…

Paranoid red-team analyst for large language models — scans applications that call large language models for findings from the OWASP Top 10 for Large Language…

Validates ML models for performance, fairness, robustness, drift, and deployment readiness.