Security and supply chain — linters for the rules that bind software

Oracle JDK License Gate

VS Code extension

Finds the Java lines in your build that Oracle now bills for, and the free line that replaces each one

VS Code Marketplace: 1535 installs

pypdf Migration Check - PyMuPDF AGPL Licence Gate

VS Code extension

Map every fitz / PyMuPDF line to its pypdf, pdfplumber or pypdfium2 replacement

VS Code Marketplace: 435 installs

Conda License Lint: Anaconda defaults channel

VS Code extension

Finds every environment.yml and .condarc line that pulls from Anaconda's licensed repository

VS Code Marketplace: 87 installs

VSCodium Migration Lint: Microsoft-only Extensions

VS Code extension

VSCodium migration check for extensions.json and devcontainer.json: 16 rules, licence clause and open replacement per finding

VS Code Marketplace: 41 installs

Firmware Release Gate for sdkconfig and prj.conf

VS Code extension

Finds the build-config lines that ship an ESP-IDF or Zephyr device with secure boot off, a debug port open, unsigned images or plaintext OTA.

VS Code Marketplace: 35 installs

NuGet License Gate: AutoMapper, MediatR

VS Code extension

Flags AutoMapper 15+, MediatR 13+, FluentAssertions 8+, MassTransit 9+ and other NuGet versions past their licence line, with the pin

VS Code Marketplace: 33 installs

Rancher Desktop Migration Check — Docker Desktop licence lines

VS Code extension

Every Docker Desktop-only line in your repo, with the Rancher Desktop line that replaces it

VS Code Marketplace: 27 installs

SBOM Field Check for CRA 2026

VS Code extension

Names every missing field in your CycloneDX or SPDX SBOM against BSI TR-03183-2 and the CISA 2026 minimum elements. 34 rules. Runs offline.

VS Code Marketplace: 24 installs

NiceGUI Migration Check: PySimpleGUI Licence Gate

VS Code extension

Flags the PySimpleGUI.net/install private index, the PySimpleGUI==5.0.8.3 PyPI stub, proprietary 5.x pins, a bare PySimpleGUIQt (5.0.0, Free To Use But Restricted),…

VS Code Marketplace: 20 installs

Apache ECharts Migration: Highcharts Licence Map

VS Code extension

Every Highcharts line in package.json, .csproj, HTML or JS/TS, with the Apache ECharts line that replaces it

VS Code Marketplace: 10 installs

NuGet Pack Gate — csproj licence, icon, TFM

VS Code extension

nuget pack csproj check for .csproj, .fsproj, .vbproj and Directory.Build.props: the sample Acme.Invoicing.csproj returns 6 findings (2 errors, 4 warnings) — net8.0 and…

VS Code Marketplace: 10 installs

TLS Cert Lifetime Lint - SC-081v3 renewal check

VS Code extension

Finds the 12 settings that break when public TLS certificates fall to 100 days on 2027-03-15: openssl -days, Terraform, cert-manager, late expiry alerts, HPKP, TLS…

SQL Server Docker Licence Lint (MSSQL_PID)

VS Code extension

mssql docker licence check for compose, Kubernetes and Dockerfiles

SQL Card Data Lint (PCI DSS Req 3)

VS Code extension

Names every column, index, view and seed row in a .sql migration that stores card data, with its PCI DSS Requirement 3 rule id

Firestore Rules Guard

VS Code extension

Audits firestore.rules and storage.rules for public access, expired test-mode dates and missing owner checks — 13 rules, line by line, before you deploy.

Proxmox Migration Check: VMware vSphere Lint

VS Code extension

Every vSphere line in Terraform, Packer and Ansible, mapped to its Proxmox VE replacement

Security Headers Lint - CSP and Dead Headers

VS Code extension

Reads security headers and CSP line by line in your config file and names the lines that silently do nothing: retired headers, keywords missing their quotes, directives…

Cinc Migration Check: Chef Infra licence gate lint

VS Code extension

11 rules for bootstrap scripts, kitchen.yml, client.rb, Dockerfiles and CI workflows. The sample provision.sh gives 6 findings.

Crypto Export Notice Lint (EAR 742.15)

VS Code extension

Ten checks on the export paragraph of a repository that ships encryption

Cybersecurity Container Audit — NIST SP 800-190

VS Code extension

Reads a Dockerfile or compose file and names the hardening controls it fails, with the NIST SP 800-171 requirement each one puts at risk.

AI Model License Lint

VS Code extension

Reads the open-weight model IDs in your code and names the licence clause that binds you - 22 rules, 17 findings on a 33-line fixture

SPF & DMARC Record Lint

VS Code extension

19 offline checks on the SPF, DMARC and DKIM records in your branch — including the DMARC rewrite of May 2026

.NET EOL & CRA Support Window Gate

VS Code extension

Dates every target framework in a .csproj against Microsoft's end-of-support day and against the support period you promise

security.txt Lint - RFC 9116 + CRA contact point

VS Code extension

13 rules that decide whether a vulnerability report ever reaches you

CSAF Advisory Check for CRA 2026

VS Code extension

Runs all 43 mandatory and profile conformance tests of CSAF 2.0 section 6.1 on the advisory you are writing: product ID graph, revision history, CVSS recomputed from the…

PCI Payment Page Script Audit: requirement 6.4.3 and 11.6.1 on your checkout markup

VS Code extension

PCI DSS 4.0.1 requirements 6.4.3 and 11.6.1 have been mandatory since 2025-03-31, and the PCI SSC revised FAQ 1331 on 2026-08-04 so a QSA agreement alone no longer marks…

Audit Log Retention Lint (PCI DSS, CERT-In)

VS Code extension

Log retention lint for Loki, CloudWatch, ILM, S3 and Kubernetes audit YAML

Terraform State Secret Leak Lint

VS Code extension

Names the attributes, outputs and backends that copy a cleartext secret into terraform.tfstate

OpenAPI Security Contract Lint

VS Code extension

Finds the lines in an OpenAPI file that publish an endpoint with no authentication, an API key in the query string, or an OAuth grant RFC 9700 forbids.

License Flip Audit - BUSL/SSPL/AGPL in your deps

VS Code extension

Finds the dependencies whose licence changed under you - Terraform 1.6+ BUSL, Redis 7.4+ SSPL, Bitnami's August 2025 move, Elastic 7.11 - and names the exact version…

CRA Readiness Audit for EU Cyber Resilience Act

VS Code extension

Flags the lines in your repo that break the EU Cyber Resilience Act - default passwords, disabled TLS checks, floating base images, an expired security.txt - naming the…

Nurse Cover Letter Template — RN license line for the state you apply to (NLC 2026)

5 nurse cover letters and 2 follow-up emails, with the license line for 40 compact states and the 10 places a multistate license does not cover

sglang Migration Check: NVIDIA NIM Licence Gate

VS Code extension

Every NVIDIA NIM line in Dockerfile, compose, Helm and Terraform, with the SGLang or vLLM line that replaces it — 11 rules

Capital Gains Tax Calculator UK 2025/26 — Shares & Crypto, Pay by 31 January 2027

Spreadsheet calculator

For UK investors who sold shares or crypto between 6 April 2025 and 5 April 2026: 18% or 24% on gains above the £3,000 allowance, due 31 January 2027, and HMRC adds 5%…

Tiptap Migration Check — TinyMCE Legacy Fee & Licence Cost Calculator (2026)

Spreadsheet calculator

Still on TinyMCE 6 in Tiny Cloud? Tiny adds a legacy flat fee ($30 Essential, $55 Professional a month, annual billing) and charges $65 instead of $40 per extra 1,000…

Proxmox Migration Check: VMware 72-Core Licence Cost Calculator (2026)

Spreadsheet calculator

Since 10 April 2025 Broadcom bills every VMware order for at least 72 cores and every CPU for at least 16, so one 8-core host pays for 64 cores it does not have, plus…

Secret Santa Generator for UK Offices — HMRC £50 Gift & £150 Party Check 2026

Spreadsheet calculator

Draw names free, then check the bit HMRC cares about: a company-paid gift over £50 is taxable in full (ITEPA s323A), and if the Christmas party plus your other annual…

PySide6 Migration Lint: PyQt5/PyQt6 Licence Gate

VS Code extension

14 rules flag PyQt5/PyQt6 imports and the PyQt-only APIs that break under LGPL PySide6, one fix per line

JS Licence Key Gate: GPL & Eval Keys

VS Code extension

Handsontable, TinyMCE, CKEditor 5, FullCalendar, AG Grid, MUI X and Syncfusion licence keys in closed-source JS/TS

Pekko Migration Gate — Akka BSL licence check

VS Code extension

Pekko migration check: Akka 2.9.x is BSL 1.1 until at least 2026-10-23, Akka 2.8.8 until 2027-10-28 — each Akka release has its own Change Date.

Python Log Leak Lint: PCI DSS Card Data

VS Code extension

Finds card numbers, CVV, track data, PINs, passwords and auth headers in Python log, print and raise calls, with 10 rules

Webfont License Audit

VS Code extension

The 12 licence questions a foundry audit letter asks, run against your CSS

RED Cybersecurity DoC Lint (EN 18031)

VS Code extension

Checks an EU declaration of conformity for radio equipment against Delegated Regulation (EU) 2022/30 and the EN 18031:2024 citations

CRA Annex II User Docs Lint

VS Code extension

19 rules over the user documentation that ships with your product: support-period end date, vulnerability reporting contact, EU declaration of conformity address, secure…

1099-DA Basis Gap Checker (2026)

Browser extension · Chrome, Edge, Firefox

See which of your 2026 crypto sales reach the IRS with box 1e blank - and price what that blank costs.

CRA 24/72/14 Reporting Lint

VS Code extension

Checks SECURITY.md and incident runbooks against EU Cyber Resilience Act Article 14: 24-hour early warning, 72-hour notification, 14-day final report, ENISA Single…

SPDX License Field Lint for package.json, pyproject.toml and Cargo.toml

VS Code extension

Reads the licence field in the open manifest and names every deprecated SPDX id, invalid string, PEP 639 leftover and copyleft obligation - with the exact replacement…

Connection String & Secret Audit — 8 Stacks

VS Code extension

26 rules and 32 safe-replacement snippets for hardcoded connection strings, keys and kubeconfigs across 8 VS Code stacks. Runs on your machine and sends nothing anywhere.

Hugging Face Model Licence Matrix — all 70 model-card `license:` identifiers × the 4 questions a commercial release turns on

Copy the `license:` string off the model card, read four rows, close the review ticket — 70 identifiers, 4 questions, 280 rows, every row naming the clause it came from.