Security and supply chain — linters for the rules that bind software

Oracle JDK License Gate

VS Code extension

Finds the Java lines in your build that Oracle now bills for, and the free line that replaces each one

VS Code Marketplace: 693 installs

pypdf Migration Check - PyMuPDF AGPL Licence Gate

VS Code extension

Map every fitz / PyMuPDF line to its pypdf, pdfplumber or pypdfium2 replacement

VS Code Marketplace: 147 installs

Conda License Lint: Anaconda defaults channel

VS Code extension

Finds every environment.yml and .condarc line that pulls from Anaconda's licensed repository

VS Code Marketplace: 37 installs

Firmware Release Gate for sdkconfig and prj.conf

VS Code extension

Finds the build-config lines that ship an ESP-IDF or Zephyr device with secure boot off, a debug port open, unsigned images or plaintext OTA.

VS Code Marketplace: 23 installs

SBOM Field Check for CRA 2026

VS Code extension

Names every missing field in your CycloneDX or SPDX SBOM against BSI TR-03183-2 and the CISA 2026 minimum elements. 34 rules. Runs offline.

VS Code Marketplace: 12 installs

VSCodium Migration Lint: Microsoft-only Extensions

VS Code extension

VSCodium migration check for extensions.json and devcontainer.json: 16 rules, licence clause and open replacement per finding

VS Code Marketplace: 11 installs

NuGet License Gate: AutoMapper, MediatR

VS Code extension

Flags AutoMapper 15+, MediatR 13+, FluentAssertions 8+, MassTransit 9+ and other NuGet versions past their licence line, with the pin

VS Code Marketplace: 10 installs

NuGet Pack Gate — csproj licence, icon, TFM

VS Code extension

nuget pack csproj check for .csproj, .fsproj, .vbproj and Directory.Build.props: the sample Acme.Invoicing.csproj returns 6 findings (2 errors, 4 warnings) — net8.0 and…

SQL Server Docker Licence Lint (MSSQL_PID)

VS Code extension

mssql docker licence check for compose, Kubernetes and Dockerfiles

TLS Cert Lifetime Lint - SC-081v3 renewal check

VS Code extension

Finds the 12 settings that break when public TLS certificates fall to 100 days on 2027-03-15: openssl -days, Terraform, cert-manager, late expiry alerts, HPKP, TLS…

Crypto Export Notice Lint (EAR 742.15)

VS Code extension

Ten checks on the export paragraph of a repository that ships encryption

AI Model License Lint

VS Code extension

Reads the open-weight model IDs in your code and names the licence clause that binds you - 22 rules, 17 findings on a 33-line fixture

Firestore Rules Guard

VS Code extension

Audits firestore.rules and storage.rules for public access, expired test-mode dates and missing owner checks — 13 rules, line by line, before you deploy.

SQL Card Data Lint (PCI DSS Req 3)

VS Code extension

Names every column, index, view and seed row in a .sql migration that stores card data, with its PCI DSS Requirement 3 rule id

Apache ECharts Migration: Highcharts Licence Map

VS Code extension

Every Highcharts line in package.json, .csproj, HTML or JS/TS, with the Apache ECharts line that replaces it

Terraform State Secret Leak Lint

VS Code extension

Names the attributes, outputs and backends that copy a cleartext secret into terraform.tfstate

SPF & DMARC Record Lint

VS Code extension

19 offline checks on the SPF, DMARC and DKIM records in your branch — including the DMARC rewrite of May 2026

security.txt Lint - RFC 9116 + CRA contact point

VS Code extension

13 rules that decide whether a vulnerability report ever reaches you

CSAF Advisory Check for CRA 2026

VS Code extension

Runs all 43 mandatory and profile conformance tests of CSAF 2.0 section 6.1 on the advisory you are writing: product ID graph, revision history, CVSS recomputed from the…

License Flip Audit - BUSL/SSPL/AGPL in your deps

VS Code extension

Finds the dependencies whose licence changed under you - Terraform 1.6+ BUSL, Redis 7.4+ SSPL, Bitnami's August 2025 move, Elastic 7.11 - and names the exact version…

PCI Payment Page Script Audit: requirement 6.4.3 and 11.6.1 on your checkout markup

VS Code extension

PCI DSS 4.0.1 requirements 6.4.3 and 11.6.1 have been mandatory since 2025-03-31, and the PCI SSC revised FAQ 1331 on 2026-08-04 so a QSA agreement alone no longer marks…

Security Headers Lint - CSP and Dead Headers

VS Code extension

Reads security headers and CSP line by line in your config file and names the lines that silently do nothing: retired headers, keywords missing their quotes, directives…

Rancher Desktop Migration Check — Docker Desktop licence lines

VS Code extension

Every Docker Desktop-only line in your repo, with the Rancher Desktop line that replaces it

Proxmox Migration Check: VMware vSphere Lint

VS Code extension

Every vSphere line in Terraform, Packer and Ansible, mapped to its Proxmox VE replacement

NiceGUI Migration Check: PySimpleGUI Licence Gate

VS Code extension

Flags the PySimpleGUI.net/install private index, the PySimpleGUI==5.0.8.3 PyPI stub, proprietary 5.x pins, a bare PySimpleGUIQt (5.0.0, Free To Use But Restricted),…

Capital Gains Tax Calculator UK 2025/26 — Shares & Crypto, Pay by 31 January 2027

Spreadsheet calculator

For UK investors who sold shares or crypto between 6 April 2025 and 5 April 2026: 18% or 24% on gains above the £3,000 allowance, due 31 January 2027, and HMRC adds 5%…

Tiptap Migration Check — TinyMCE Legacy Fee & Licence Cost Calculator (2026)

Spreadsheet calculator

Still on TinyMCE 6 in Tiny Cloud? Tiny adds a legacy flat fee ($30 Essential, $55 Professional a month, annual billing) and charges $65 instead of $40 per extra 1,000…

Proxmox Migration Check: VMware 72-Core Licence Cost Calculator (2026)

Spreadsheet calculator

Since 10 April 2025 Broadcom bills every VMware order for at least 72 cores and every CPU for at least 16, so one 8-core host pays for 64 cores it does not have, plus…

Secret Santa Generator for UK Offices — HMRC £50 Gift & £150 Party Check 2026

Spreadsheet calculator

Draw names free, then check the bit HMRC cares about: a company-paid gift over £50 is taxable in full (ITEPA s323A), and if the Christmas party plus your other annual…

Cinc Migration Check: Chef Infra licence gate lint

VS Code extension

11 rules for bootstrap scripts, kitchen.yml, client.rb, Dockerfiles and CI workflows. The sample provision.sh gives 6 findings.

PySide6 Migration Lint: PyQt5/PyQt6 Licence Gate

VS Code extension

14 rules flag PyQt5/PyQt6 imports and the PyQt-only APIs that break under LGPL PySide6, one fix per line

JS Licence Key Gate: GPL & Eval Keys

VS Code extension

Handsontable, TinyMCE, CKEditor 5, FullCalendar, AG Grid, MUI X and Syncfusion licence keys in closed-source JS/TS

Pekko Migration Gate — Akka BSL licence check

VS Code extension

Pekko migration check: Akka 2.9.x is BSL 1.1 until at least 2026-10-23, Akka 2.8.8 until 2027-10-28 — each Akka release has its own Change Date.

Audit Log Retention Lint (PCI DSS, CERT-In)

VS Code extension

Log retention lint for Loki, CloudWatch, ILM, S3 and Kubernetes audit YAML

Python Log Leak Lint: PCI DSS Card Data

VS Code extension

Finds card numbers, CVV, track data, PINs, passwords and auth headers in Python log, print and raise calls, with 10 rules

Cybersecurity Container Audit — NIST SP 800-190

VS Code extension

Reads a Dockerfile or compose file and names the hardening controls it fails, with the NIST SP 800-171 requirement each one puts at risk.

Webfont License Audit

VS Code extension

The 12 licence questions a foundry audit letter asks, run against your CSS

RED Cybersecurity DoC Lint (EN 18031)

VS Code extension

Checks an EU declaration of conformity for radio equipment against Delegated Regulation (EU) 2022/30 and the EN 18031:2024 citations

CRA Annex II User Docs Lint

VS Code extension

19 rules over the user documentation that ships with your product: support-period end date, vulnerability reporting contact, EU declaration of conformity address, secure…

1099-DA Basis Gap Checker (2026)

Browser extension · Chrome, Edge, Firefox

See which of your 2026 crypto sales reach the IRS with box 1e blank - and price what that blank costs.

.NET EOL & CRA Support Window Gate

VS Code extension

Dates every target framework in a .csproj against Microsoft's end-of-support day and against the support period you promise

OpenAPI Security Contract Lint

VS Code extension

Finds the lines in an OpenAPI file that publish an endpoint with no authentication, an API key in the query string, or an OAuth grant RFC 9700 forbids.

CRA 24/72/14 Reporting Lint (Article 14)

VS Code extension

Reads your SECURITY.md against the EU Cyber Resilience Act reporting clock that started on 11 September 2026 — 24 hours, 72 hours, 14 days, to ENISA and your…

SPDX License Field Lint for package.json, pyproject.toml and Cargo.toml

VS Code extension

Reads the licence field in the open manifest and names every deprecated SPDX id, invalid string, PEP 639 leftover and copyleft obligation - with the exact replacement…

CRA Readiness Audit for EU Cyber Resilience Act

VS Code extension

Flags the lines in your repo that break the EU Cyber Resilience Act - default passwords, disabled TLS checks, floating base images, an expired security.txt - naming the…

Connection String & Secret Audit — 8 Stacks

VS Code extension

26 rules and 32 safe-replacement snippets for hardcoded connection strings, keys and kubeconfigs across 8 VS Code stacks. Runs on your machine and sends nothing anywhere.

Hugging Face Model Licence Matrix — all 70 model-card `license:` identifiers × the 4 questions a commercial release turns on

Copy the `license:` string off the model card, read four rows, close the review ticket — 70 identifiers, 4 questions, 280 rows, every row naming the clause it came from.