NovaCheck

AI coding tools make it incredibly easy to ship code. They also make it incredibly easy to ship code you don’t fully understand. NovaCheck is a local-first trust scanner for AI-generated code. It looks for signals such as: * 👻 Ghost dependencies * 🔐 Exposed secrets * ⚠️ Dangerous code sinks * 🤖 AI-generated security patterns * 📦 Dependency and project inconsistencies * 📊 SARIF-compatible findings NovaCheck runs locally, so your source code doesn’t need to leave your machine.