Back to feed
Dev.to
Dev.to
5/10/2026
I'm a CS student. I built a GitHub App and audited 5 popular repos with it. here's what I found.

I'm a CS student. I built a GitHub App and audited 5 popular repos with it. here's what I found.

Short summary

A CS student solo-built Zaxion, a GitHub App that audits code against custom standards violations using Babel AST parsing and automated policy enforcement. Testing the tool on 5 popular open-source repositories (cal.com, tRPC, Astro) revealed real production issues—shipped console.logs and unhandled async promises—that had passed human code review. The tool is free for open-source projects with commercial pricing available; the creator is actively seeking user feedback to refine detection policies for different codebases.

  • •CS student solo-built Zaxion, a GitHub App using Babel AST to audit code against custom standards
  • •Testing on 5 popular OSS repos found real production bugs that passed human review
  • •Free for open-source with commercial pricing; creator actively seeking feedback on policy refinement

Generated with AI, which can make mistakes.

#product-launch#ai-tools#open-source
Read full article at Dev.to

Is this a good recommendation for you?

Comments

Failed to load comments. Please try again.

Explore more

I Tested My Static Analysis Tool Against 4 Real Open-Source Repos. Here's What It Got Wrong.
Dev.to
New tool audits Supabase, Firebase, Appwrite, PocketBase, Nhost security leaks
Dev.to
Building an autonomous GitHub bounty-hunting bot with a self-improving feedback loop
Dev.to
The original title is "I built an open-source Terraform drift scanner in 2 days, before starting college"
Dev.to