A Salesforce CLI plugin for analysis and optimization of Salesforce Flow. Scans metadata for 20+ issues such as hardcoded IDs, unsafe contexts, inefficient SOQL/DML operations, recursion risks, and missing fault handling. Supports auto-fixes, rule configu

The `example-connector` provides eleven services that return data from a hardcoded data set:

Hardcoded prompt tool

A powerful interactive CLI tool that scans your codebase for hardcoded secrets, API keys, passwords, and private keys before they reach your Git history.

Highlight hardcoded text, extract locale keys, and validate translations

ESLint plugin for JWT security — detects algorithm confusion (CVE-2022-23540), alg:none, weak or hardcoded secrets, and decode-without-verify.

Security scanner for AI-generated apps (Cursor, Lovable, Windsurf, v0). Catches hardcoded secrets, prompt injection, hallucinated imports, Server Actions / Edge runtime mistakes, and the vibe-coded vulnerabilities traditional linters miss.

ESLint plugin for MongoDB and Mongoose security — detects NoSQL operator injection, unsafe queries and regex, hardcoded connection strings, and missing TLS.

ESLint plugin for Vercel AI SDK security — detects prompt injection, system-prompt leaks, hardcoded API keys, and unvalidated model output in generateText and streamText.

Extract hardcoded UI strings from a React codebase, translate them, and open a pull request with the locale files.

Primitive validator for detecting hardcoded secrets and sensitive patterns in code

A SCSS helper function to select classes without any hardcoded values

ESLint rules that catch hardcoded colors, spacing, typography, shadows, radii, borders, transitions and z-index in sx/style/css props and styled-components, so design tokens stay the only source of truth.

Free offline CLI that scans your local repo for hardcoded secrets and risky AI-generated code before you ship.

SIC free code scanner — read-only static analysis for hardcoded secrets, dangerous patterns, and dependency CVEs. Zero runtime dependencies.

> A [gulp](http://gulpjs.com/) plugin that lints your templates for hardcoded texts

Medusa v2 email notifications: hardcoded events, DB mappings (no seed), SMTP delivery.

Find copied locale values, placeholder mismatches, and hardcoded user-visible strings.

ESLint plugin for OpenAI SDK security — catches dangerouslyAllowBrowser, hardcoded API keys, and system prompts assembled from untrusted input.

Correctover Security Scanner — CCS audit for MCP configurations AND published JS bundles/npm packages. Detects hardcoded secrets, RCE, SSRF, credential hijacking against OWASP AISVS 1.0.