Developers and compliance teams

Checks of code, files and sites against a dated rule — each finding names the article and the line.

246 tools

Oracle JDK License Gate

VS Code extension

Finds the Java lines in your build that Oracle now bills for, and the free line that replaces each one

VS Code Marketplace: 503 installs

pypdf Migration Check - PyMuPDF AGPL Licence Gate

VS Code extension

Map every fitz / PyMuPDF line to its pypdf, pdfplumber or pypdfium2 replacement

VS Code Marketplace: 59 installs

Model Card Lint - EU GPAI (AI Act Art. 53)

VS Code extension

Lints a Hugging Face model card against the Hub metadata spec and the EU AI Act general-purpose AI documentation duties, line by line.

VS Code Marketplace: 10 installs

Pytest Deprecation Lint (pytest 8 removals)

VS Code extension

Marks the lines in your test suite that current pytest no longer runs — and the config keys it silently ignores.

WP Plugin Review Gate

VS Code extension

The readme.txt and plugin-header lines that send a wordpress.org submission back, found before you submit

MapLibre Migration Lint — Mapbox GL JS v2+

VS Code extension

MapLibre migration check for Mapbox GL JS v2+ code: 17 rules, each with the maplibre-gl fix

Firmware Release Gate for sdkconfig and prj.conf

VS Code extension

Finds the build-config lines that ship an ESP-IDF or Zephyr device with secure boot off, a debug port open, unsigned images or plaintext OTA.

VS Code Marketplace: 21 installs

WordPress Privacy Lint (GDPR / DSGVO)

VS Code extension

Finds the 12 author-side privacy duties your plugin PHP breaks, with the article and the fix on every line.

Flit Migration Check: setup.py to flit_core 4

VS Code extension

Map every setup.py, setup.cfg and old pyproject.toml line to its flit_core 4 replacement

Maven Central Publish Gate

VS Code extension

Read a pom.xml the way the Central Portal reads it, before you burn a release tag

VS Code Marketplace: 13 installs

MCP Server Config Audit

VS Code extension

Audit one mcp.json for what an agent config gives away — inline API keys, unpinned npx launches, plaintext remote servers, shell wrappers, auto-approved tools,…

View in Browser — Publish Leak Audit (HTML)

VS Code extension

24 rules read the .html file you are about to open in the browser and flag every line that behaves differently once the page has a public URL: live API keys, localhost…

VSIX Publish Lint

VS Code extension

Find the package.json lines that stop vsce before you run the release build

VS Code Marketplace: 10 installs

SBOM Field Check for CRA 2026

VS Code extension

Names every missing field in your CycloneDX or SPDX SBOM against BSI TR-03183-2 and the CISA 2026 minimum elements. 34 rules. Runs offline.

VS Code Marketplace: 12 installs

RED Cybersecurity DoC Lint (EN 18031)

VS Code extension

Checks an EU declaration of conformity for radio equipment against Delegated Regulation (EU) 2022/30 and the EN 18031:2024 citations

Open VSX Publish Gate - vsce & ovsx preflight

VS Code extension

package.json and publish-workflow check for VS Code extension authors: every vsce and Open VSX blocker with its line and fix

Coverage Gate Lint

VS Code extension

Finds the coverage gates in your repo that can never fail a build

VS Code Marketplace: 16 installs

Firebase Deploy Leak Audit

VS Code extension

Reads firebase.json and names the files your next firebase deploy would publish to the open web

Firestore Rules Guard

VS Code extension

Audits firestore.rules and storage.rules for public access, expired test-mode dates and missing owner checks — 13 rules, line by line, before you deploy.

Intel HEX & S-record Image Audit

VS Code extension

Recomputes every checksum in a .hex or .srec image and maps every address it writes, before the image reaches the programmer.

VSCodium Migration Lint: Microsoft-only Extensions

VS Code extension

VSCodium migration check for extensions.json and devcontainer.json: 16 rules, licence clause and open replacement per finding

Google Play Release Blocker Lint - target API 36, Billing 8, 16 KB

VS Code extension

Finds the lines that make Google Play reject your release - target API below 36, Billing Library below 8, 4 KB-only native libs - and prints the date each gate closed.

rf-detr Migration Check — Ultralytics YOLO ties

VS Code extension

rf-detr migration check for Dockerfiles, requirements.txt, pyproject.toml, environment.yml and Python: a 12-line Dockerfile returns 6 findings (4 errors, 2 warnings) —…

Biometric Consent Audit (BIPA / CUBI / CO)

VS Code extension

14 rules over face, fingerprint and voiceprint code: written release, destruction schedule, the 1095-day cap and the three EU AI Act prohibitions

LaTeX Submission Lint: Desk-Reject Check

VS Code extension

Seventeen rules on your .tex file: the statements the editorial office looks for, and the source that breaks the publisher's build.

Podman Migration Check — Docker Desktop ties

VS Code extension

Podman migration check for compose.yaml, Dockerfile, devcontainer.json and CI: a 17-line compose.yaml returns 6 findings (3 errors, 3 warnings) — docker.sock,…

E-Invoice Mandate Lint - EU 2026

VS Code extension

Lints UBL and CII invoice XML against EN 16931 and the national e-invoicing mandates that are live in 2026

BEM Class Auditor for HTML and SCSS

VS Code extension

16 BEM naming rules read the HTML file you have open and 22 markup and SCSS skeletons write the stylesheet shell, so the class names get fixed before the pull request…

Agentforce Action Audit

VS Code extension

13 rules on a Salesforce Agentforce topic file, before the deploy and before Article 50

WCAG 2.2 CSS Lint - Focus & Target Size

VS Code extension

Reads your stylesheet and names the success criterion each rule breaks, including the three WCAG 2.2 added that WCAG 2.1 linters never learned.

NuGet License Gate: AutoMapper, MediatR

VS Code extension

Flags AutoMapper 15+, MediatR 13+, FluentAssertions 8+, MassTransit 9+ and other NuGet versions past their licence line, with the pin

JDK 25 Upgrade Blocker Lint

VS Code extension

Finds the Java lines the new LTS removed — 18 rules; 23 findings in one 64-line fixture

CRAN Policy Submission Lint

VS Code extension

Catch the CRAN Repository Policy violations before the volunteer team does

Bulk Sender Lint - the Gmail, Yahoo and Outlook.com rules, checked in your mailer code

VS Code extension

21 dated checks over SPF, DKIM, DMARC, RFC 8058 one-click unsubscribe and TLS, in VS Code and in the browser

NuGet Pack Gate — csproj licence, icon, TFM

VS Code extension

nuget pack csproj check for .csproj, .fsproj, .vbproj and Directory.Build.props: the sample Acme.Invoicing.csproj returns 6 findings (2 errors, 4 warnings) — net8.0 and…

Valkey Migration Check — ElastiCache Redis ties

VS Code extension

Valkey migration check for Terraform, CloudFormation, compose and Dockerfiles: a 44-line main.tf returns 6 findings (3 errors, 3 warnings) — redis5.0 parameter group,…

OpenBao Migration Lint — HashiCorp Vault

VS Code extension

OpenBao migration check for HashiCorp Vault scripts, Terraform, Helm values and server HCL: 14 rules, each with the OpenBao fix

Conda License Lint: Anaconda defaults channel

VS Code extension

Finds every environment.yml and .condarc line that pulls from Anaconda's licensed repository

VS Code Marketplace: 28 installs

Manuscript Disclosure Lint

VS Code extension

16 rules that catch the statements a journal desk-rejects you for — in your .tex or .md, before you submit

Ren'Py Release Gate

VS Code extension

Find the .rpy lines that compile clean and only break inside a player's save

EU Data Act Switching Clause Lint

VS Code extension

Reads your cloud contract text and names every clause Chapter VI no longer allows, with the article number and the wording that replaces it

AutoHotkey v2, TOML and DeviceTree checks for VS Code

VS Code extension

A DeviceTree overlay with status = "enabled" boots the node disabled and a TOML integer with a leading zero stops the parser. Neither is an editor error.

EN 16931 e-Invoice Lint

VS Code extension

Checks an invoice payload or field mapping against EN 16931 and the national CIUS of the country it detects — 29 rules, in your editor.

helm chart lint Chart.yaml - Helm 4 Release Gate

VS Code extension

Every broken Chart.yaml line with its replacement line, before Helm 3 security fixes end 2026-11-11

OpenPDF Migration Check: iText AGPL Gate

VS Code extension

openpdf: 6 findings in one pom.xml, each mapped to OpenPDF 3.0.5 or PDFBox 3.0.8

OpenIddict Migration Check: Duende IdentityServer

VS Code extension

Every Duende call in Program.cs mapped to OpenIddict, with the Duende edition price your setup needs

SQL Server Docker Licence Lint (MSSQL_PID)

VS Code extension

mssql docker licence check for compose, Kubernetes and Dockerfiles

Python Upgrade Lint: Removed Stdlib 3.12-3.14

VS Code extension

Find every import and call that Python 3.12, 3.13 or 3.14 removed before you leave Python 3.10 (end of life October 2026). 43 rules.

Crypto Export Notice Lint (EAR 742.15)

VS Code extension

Ten checks on the export paragraph of a repository that ships encryption

Age Gate Lint — UK Online Safety Act

VS Code extension

8 rules for Ofcom's highly effective age assurance duty, in force since 25 July 2025, where the penalty ceiling is £18m (£18 million) or 10% of qualifying worldwide…

Proto Wire Break Check

VS Code extension

Names the .proto edits that keep compiling and quietly change what old gRPC readers see

EU Liability Window Lint

VS Code extension

12 rules read your CHANGELOG.md the way Directive (EU) 2024/2853 will read it from 2026-12-09: undated releases lose the start of the 10-year window in Art.

Livewire Client Surface Audit

VS Code extension

Marks every line of a Livewire or Blade file that the visitor's browser can call, rewrite or read

France E-Invoice Reception Lint

VS Code extension

12 checks for the French mandatory mentions a PDP rejects, on Factur-X, UBL and CII invoices

pyproject.toml Release Gate (PEP 639)

VS Code extension

19 date-aware checks on the [project] metadata that decides whether your next release uploads

VS Code Marketplace: 19 installs

Cron Schedule Lint for crontab, Kubernetes CronJob, GitHub Actions, Spring and EventBridge

VS Code extension

Names every schedule line in the file you have open that fires at the wrong hour, twice, or never at all - and prints the next three times each one really fires, in the…

TLS Cert Lifetime Lint - SC-081v3 renewal check

VS Code extension

Finds the 12 settings that break when public TLS certificates fall to 100 days on 2027-03-15: openssl -days, Terraform, cert-manager, late expiry alerts, HPKP, TLS…

Security Headers Lint - CSP and Dead Headers

VS Code extension

Reads security headers and CSP line by line in your config file and names the lines that silently do nothing: retired headers, keywords missing their quotes, directives…

Proxmox Migration Check: VMware 72-Core Licence Cost Calculator (2026)

Spreadsheet calculator

Since 10 April 2025 Broadcom bills every VMware order for at least 72 cores and every CPU for at least 16, so one 8-core host pays for 64 cores it does not have, plus…

ADA Compliance Checker 2027 — Title II PDF Scope & Budget (28 CFR 35.201)

Spreadsheet calculator

For city, county and school-district web teams: WCAG 2.1 AA applies from April 26, 2027 (population 50,000+) or April 26, 2028.

OWASP Dependency Check Config Lint

VS Code extension

OWASP dependency check setup lint with 10 rules: the sample pom.xml returns 6 findings (3 errors, 3 warnings) — plugin 8.4.3 below the 12.1.0 mandatory upgrade of…

Admin Dashboard UI Kit — DSAR Privacy Request Console (GDPR · CCPA · LGPD)

Figma kit

8 components, 30 variants for the admin screen where privacy requests get answered on time: GDPR one month, CCPA 45 days, LGPD 15 days from receipt.

pubspec Publish Gate - pub.dev pre-publish check

VS Code extension

pubspec publish: 6 findings on the example pubspec.yaml, 10 rules from dart.dev

Lambda Package Size Budget - 250 MB check

VS Code extension

Lambda package size: measured MB per requirements.txt and package.json line against the 250 MB limit

Testimonial Submission Form with FTC Review Disclosures – 16 CFR Part 465 Staff and Reward Checks for US Businesses

WordPress plugin

The FTC Consumer Reviews and Testimonials Rule (16 CFR Part 465, in force since 21 October 2024) requires reviews by your staff or their relatives to clearly disclose…

Xcode 26 SDK Gate for GitHub Actions

VS Code extension

Xcode 26 App Store Connect SDK requirement: which Xcode each CI job really builds with, and the fix line

npm publish package.json gate: engines & SPDX

VS Code extension

Node 20 end of life, SPDX licence and provenance checks for package.json

composer.json Validate - PHP EOL Release Gate

VS Code extension

composer.json validate: end-of-life PHP floors and composer validate --strict fields, with the fix line

go.mod Release Gate: /vN suffix and go line check

VS Code extension

go.mod check before you tag: /v2 suffix, supported Go line, toolchain, replace, require

gitlab-runner Compute Minutes Audit for GitLab CI

VS Code extension

Ranks every .gitlab-ci.yml job by GitLab.com cost factor and worst-case compute minutes, with the tags: line that moves it to your own gitlab-runner.

F-Droid Inclusion Gate - non-free Gradle dependency map

VS Code extension

F-Droid migration check for build.gradle: 25 rules for Play Services, Firebase, Crashlytics, Play Billing, trackers and Maven repos, each with its FOSS replacement line

GHDL Migration Check — Vivado xsim to GHDL

VS Code extension

Flags VHDL lines Vivado xsim accepts but GHDL rejects: UNISIM, XPM, std_logic_unsigned, VHDL-2008 without --std=08, plain shared variables, encrypted IP. 12 rules.

Resend Migration Check: SendGrid code lint

VS Code extension

Twilio SendGrid retired its free Email API plan starting May 27, 2025.

Forgejo Migration Check — Gitea 1.22 cutoff

VS Code extension

Lints docker-compose files for the Gitea to Forgejo switch: Gitea 1.23+ has no transparent upgrade (Forgejo, 18 Dec 2024), the first hop is Forgejo v10.0.x, Forgejo 11…

SeaweedFS Migration Lint — MinIO Compose & K8s

VS Code extension

SeaweedFS migration check for MinIO docker-compose, Kubernetes, .env and mc scripts: 17 rules, each with the SeaweedFS fix

SkiaSharp Migration Check for ImageSharp

VS Code extension

Flags the Six Labors lines under the Split License and the SkiaSharp fix for each

OpenTofu Migration Lint — Terraform

VS Code extension

OpenTofu migration check for Terraform, HCP Terraform, CI workflows and Dockerfiles: 13 rules, each with the OpenTofu fix

OpenVox Migration Check for Puppet

VS Code extension

Flags the Puppet package, repo, image and gem lines that change when a fleet moves to OpenVox

Cinc Migration Check: Chef Infra licence gate lint

VS Code extension

11 rules for bootstrap scripts, kitchen.yml, client.rb, Dockerfiles and CI workflows. The sample provision.sh gives 6 findings.

FerretDB Migration Lint — MongoDB SSPL gate

VS Code extension

ferretdb migration check: SSPL MongoDB images (Community Server releases since October 16, 2018, SSPL Section 13) and FerretDB 2.7 gaps, line by line, 19 rules

GlitchTip Migration Lint for Sentry

VS Code extension

GlitchTip migration: find every Sentry setting GlitchTip drops before you switch the DSN

Yosys Migration Check - Vivado-only blockers

VS Code extension

6 findings on one Vivado board top, 12 rules, each with a Yosys-ready fix

Crashlytics Migration Lint for App Center

VS Code extension

Crashlytics migration: find every leftover App Center SDK call and its replacement

PowerSync Migration Check: Realm Sync & Data API

VS Code extension

Find every Atlas Device Sync, Data API and HTTPS Endpoint call that stopped on 2025-09-30, with its PowerSync replacement

PHP PDF library for accessible tagged PDFs (ADA Title II)

Council agendas, notices and permit forms your PHP app writes pass 8 of 8 accessibility checks, before the April 26, 2027 Title II date

Brave Search API Migration Check — Google Custom Search & Bing

VS Code extension

Google Custom Search JSON API: existing customers must transition by 2027-01-01. Bing Search API v7 retired 2025-08-11. 19 rules map each line to the Brave Search API.

YugabyteDB Migration Check: CockroachDB SQL

VS Code extension

25 rules for CockroachDB .sql files that YugabyteDB YSQL rejects or reads differently, plus licence-key and telemetry settings

OpenSearch Migration Check: Elasticsearch & Kibana cutover lint

VS Code extension

25 rules for compose files, elasticsearch.yml, Kibana config, Logstash pipelines, client pins and mappings.

GitLab CI/CD Migration Check for GitHub Actions

VS Code extension

20 rules that flag every GitHub Actions line GitLab cannot run as-is, and the ones that need GitLab Premium

AlmaLinux Migration Lint — CentOS 7/8

VS Code extension

AlmaLinux migration check for CentOS 7/8 Dockerfiles, .repo files, scripts and Ansible: 21 rules, each with the AlmaLinux fix

PySide6 Migration Lint: PyQt5/PyQt6 Licence Gate

VS Code extension

14 rules flag PyQt5/PyQt6 imports and the PyQt-only APIs that break under LGPL PySide6, one fix per line

Farm Loss Notice Lint: Crop Insurance Deadlines

VS Code extension

Checks a crop insurance loss log against the 7 CFR 457.8 section 14 notice and claim deadlines

Risk Register Lint — NIS2 Art. 21(2)

VS Code extension

16 rules: ten Art. 21(2) measures (a)-(j) plus owner, 1-5 score, treatment and 12-month review for Markdown risk registers

Aurora MySQL 5.7 to 8.0 Upgrade Blocker Lint

VS Code extension

28 MySQL 8.0 removal rules for .sql, .cnf and Terraform, before Aurora MySQL v2 Extended Support year 3 on 1 Dec 2026

Dependency Checker — EOL Dates

VS Code extension

Dependency checker for package.json, composer.json and requirements.txt.

JS Licence Key Gate: GPL & Eval Keys

VS Code extension

Handsontable, TinyMCE, CKEditor 5, FullCalendar, AG Grid, MUI X and Syncfusion licence keys in closed-source JS/TS

MySQL 8.4 Upgrade Lint (RDS MySQL 8.0)

VS Code extension

MySQL upgrade 8.0 → 8.4: finds the SQL, my.cnf and parameter-group lines that MySQL 8.4 removed, with the fix on each line

GKE Extended Channel Fee Lint — Terraform

VS Code extension

GKE Extended channel fee check for Terraform: 14 rules on google_container_cluster versions, fee start dates, forced upgrades and Extended channel blockers

Unity assets: Korea gacha drop-rate disclosure (2024 law)

Korea has required every gacha drop rate on the buy screen since 22 March 2024. Ignoring a correction order carries up to ₩20,000,000 (Game Industry Promotion Act Art.

Pekko Migration Gate — Akka BSL licence check

VS Code extension

Pekko migration check: Akka 2.9.x is BSL 1.1 until at least 2026-10-23, Akka 2.8.8 until 2027-10-28 — each Akka release has its own Change Date.

Resilience Plan Lint (CER Directive)

VS Code extension

Checks EU critical entity risk assessment and resilience plans against CER Directive 2022/2557 Art.

Lockfile Due Diligence

VS Code extension

npm install scripts, integrity and sources under EU CRA Art. 13(5)

AKS LTS & EKS Extended Support Lint for Terraform

VS Code extension

Terraform EKS and AKS version check: sample clusters.tf on 2026-09-27 — $2,256 extra on EKS 1.32 since 2026-03-23, $3,660 on 1.31 since 2025-11-26, $5,916 total; 9 rules

Vagrantfile EOL Box Lint

VS Code extension

6 findings in 1 file: boxes past end of support, with the date and the box to move to

PostgreSQL 14 Upgrade Lint (Aurora/RDS 2027)

VS Code extension

PostgreSQL upgrade 14 → 17: finds the SQL and config lines that PostgreSQL 15, 16 and 17 removed, with the fix on each line

Docker Hub Pull Limit Lint

VS Code extension

Finds every anonymous Docker Hub pull in GitHub Actions, compose, GitLab CI, Kubernetes and Dockerfiles, including the service containers your login step never covers.

RDS Extended Support Cost Lint for Terraform

VS Code extension

Prices the AWS Extended Support surcharge on every RDS and Aurora database in your .tf files

Bitnami Image Gate: Compose, Helm, Dockerfile

VS Code extension

Finds the Bitnami image lines that broke on 2025-09-29, when versioned docker.io/bitnami tags moved to the frozen docker.io/bitnamilegacy archive

AODA Accessibility Feedback Form for Ontario Businesses – Customer Service Standard, 2026 Report Year

WordPress plugin

Every Ontario business with at least one employee must run an accessible feedback process (O. Reg. 191/11, s. 80.50).

Audit Log Retention Lint (PCI DSS, CERT-In)

VS Code extension

Log retention lint for Loki, CloudWatch, ILM, S3 and Kubernetes audit YAML

Testimonial Lint: FTC Fake Review Rule

VS Code extension

Fake, placeholder and AI-drafted testimonials in landing-page code, checked against 16 CFR Part 465 (up to $53,088 per violation)

Unity Assets: Loot Box Odds Disclosure and Pity System

Apple 3.1.1 and Google Play require loot box odds before purchase. 5 C# scripts, 12 inputs, 4 steps: one table rolls and discloses.

IoT Data Notice Lint: EU Data Act Art. 3

VS Code extension

Checks a smart-device product data notice against Data Act Article 3(2)-(3) in VS Code

Defamation Notice of Complaint Form – UK Section 5 Defence for Forums, Review and Comment Sites

WordPress plugin

A UK site that hosts what its users post keeps the Defamation Act 2013 section 5 defence only if it acts within 48 business hours of a valid notice of complaint.

DMCA Takedown Notice Form – 17 U.S.C. 512(c)(3) Copyright Complaints for US Sites

WordPress plugin

A US site that hosts what its users post keeps the DMCA safe harbor only with a registered agent and quick removal once a valid notice arrives; willful infringement…

DSA Notice and Action Form – EU Article 16 Illegal Content Reports

WordPress plugin

Since 17 February 2024 every site that stores what its users post and serves the EU must take illegal-content notices electronically (Digital Services Act, Article 16);…

Admin Dashboard UI Kit — NIS2 Incident Reporting Console (Figma + Sketch)

Figma kit

Admin dashboard UI kit for NIS2 incident consoles: the final report is due 1 month after the notification, not after awareness.

Mobile App UI Kit — Account Deletion Flow for App Store 5.1.1(v) & Google Play

Figma kit

Apps with sign-up that ship without an in-app Delete account path break App Store rule 5.1.1(v) (in force since 2022-06-30) and Google Play's account deletion policy.

Portfolio UI Kit — GDPR Two-Click Embeds & Consent Banner (Figma)

Figma kit

8 components, 27 variants for portfolio sites that embed YouTube, Vimeo, Google Maps or Instagram: two-click placeholders, an Accept all / Reject all banner of equal…

SaaS UI Kit — GDPR Consent Components for Figma (Cookie Banner, Opt-in, Withdraw)

Figma kit

SaaS UI kit for products used in the EU: 8 components, 27 variants for the whole consent path, Reject all as strong as Accept all, opt-ins unticked, a withdraw chip.

WordPress Plugin Event Registration for CPE Seminars — NASBA 50-Minute Credit Rule

WordPress plugin

Sign-up form and attendee register for CPA and EA seminar sponsors in the US.

Obsidian Kanban Template: GDPR Breach Board, 72-Hour Clock (UK & EU)

Obsidian vault

Aware Fri 2 Oct 2026 at 18:30 -> notice due Mon 5 Oct 2026 at 18:30, weekend counted. Miss GDPR Art. 33 and Art. 83(4) allows fines up to €10,000,000 or 2% of turnover.

Python Log Leak Lint: PCI DSS Card Data

VS Code extension

Finds card numbers, CVV, track data, PINs, passwords and auth headers in Python log, print and raise calls, with 10 rules

User Registration & Parental Consent for Youth Clubs — GDPR Art. 8 Ages, 30 Countries

WordPress plugin

Sign-up form that records date of birth, country and parent's consent. The Art.

Mobile App UI Kit — Accessible Components for Figma (WCAG 2.2 AA, EAA)

Figma kit

Mobile app UI kit for apps sold to EU consumers: 8 components, 24 variants, every text/fill pair measured at 4.5:1 or better, 48 px touch targets.

Dashboard UI Kit — WCAG 2.1 AA Contrast Checked, Figma

Figma kit

7 dashboard components, 22 variants, every text/fill pair at 4.5:1 or higher (lowest 5.91:1) — the contrast line EN 301 549 takes from WCAG 2.1, and Germany's BFSG fines…

CSRD Omnibus Scope Check 2027

Browser extension · Chrome, Edge, Firefox

Directive (EU) 2026/470 replaced the two-of-three test with one AND test. This tells you which side of it you landed on.

CA Climate Disclosure Clock 2026 — which SB 253 / SB 261 report your group owes, and when

Browser extension · Chrome, Edge, Firefox

CARB moved the first SB 253 report from 10 August 2026 to 10 November 2026, and is not enforcing the 1 January 2026 SB 261 date.

EUDI Wallet Request Lint (OpenID4VP)

VS Code extension

Nine rules that read the JSON your service sends to an EU Digital Identity Wallet

Action Runtime Sunset Lint

VS Code extension

Finds the GitHub Actions steps that stop running on 2026-09-23, with the version to move to

SSDF Attestation Audit for GitHub Actions

VS Code extension

14 rules, four CISA attestation sections, one workflow file

Cookie Pre-Consent Audit 2026 — France, Spain, Italy

Browser extension · Chrome, Edge, Firefox

Open a client site, count what fires before the visitor clicks anything, and see the fine ceiling that country actually applies.

MyInvois Field Check — Malaysia e-Invoice (UBL 2.1)

VS Code extension

Finds the fields IRBM rejects in a MyInvois JSON payload, on the line, before you submit.

Cybersecurity Container Audit — NIST SP 800-190

VS Code extension

Reads a Dockerfile or compose file and names the hardening controls it fails, with the NIST SP 800-171 requirement each one puts at risk.

SPL Registration Lint - FDA Establishment XML

VS Code extension

Finds the lines the FDA gateway rejects in an SPL establishment registration, and how many days are left in the October 1 - December 31 window.

Image Host Transfer Lint

VS Code extension

Names every image, font, badge and embed in your docs that sends an EU reader's IP outside the EEA - and the fix for each one.

i18n fr-CA Lint — Quebec Bill 96

VS Code extension

Finds the France-French and left-over English lines in your fr-CA locale file before an OQLF complaint does.

Schengen 90/180 Overstay Cost Checker

Browser extension · Chrome, Edge, Firefox

Prices one planned trip against the EES day count: days left, the last legal day inside, and the euro exposure if the trip runs past it.

Play Declaration Gap Lint (AndroidManifest)

VS Code extension

15 checks that name every Play Console declaration your manifest opens

CBPR+ Structured Address Lint

VS Code extension

Find the ISO 20022 postal addresses your correspondent bank will repair by hand, before you send the message

Immobilienanzeige GEG 87 Lint

VS Code extension

13 rules over German property-ad HTML: the five mandatory Section 87 GModG fields, the ten-year certificate limit, and the Anlage 10 class band that has to match the kWh…

Webfont License Audit

VS Code extension

The 12 licence questions a foundry audit letter asks, run against your CSS

GitLab CI Break Lint

VS Code extension

Names the .gitlab-ci.yml lines your runner will reject after the next GitLab major upgrade

Skilled Worker Sponsor Cost Gate 2026/27

Browser extension · Chrome, Edge, Firefox

Price the whole Home Office bill and test the offered salary against the £41,700 floor before you assign the certificate.

Notebook Share Gate

VS Code extension

18 rules that read saved .ipynb outputs — 23 findings in the 6-cell sample notebook, 0 in the cleared one

Payroll Deduction Code Audit 2026

VS Code extension

Twelve rules over the deduction-code map, before the January 31 W-2 filing date

EU Health Claim Lint — Food & Supplement Pages

VS Code extension

Finds unauthorised nutrition and health claims in your product-page HTML and Markdown and names the article that bans each one.

Payroll Rate Expiry Lint

VS Code extension

The day your rate table stopped being correct, with the line number

US Core Profile Gap Check (USCDI v3)

VS Code extension

Finds the FHIR R4 resources still pinned to US Core 3.1.1 or 5.0.1, and the USCDI v3 Patient elements they never carried.

Livewire 3 Upgrade Blocker Lint

VS Code extension

The Livewire 2 lines that die quietly in Livewire 3 — named, with the v3 replacement beside each

Tailwind v4 Upgrade Blocker Lint

VS Code extension

19 rules that find the Tailwind v3 syntax Tailwind v4 removed or silently redefined, in the file you have open, with the v4 replacement on the same line.

Consent Proof Record Lint (GDPR Art.7)

VS Code extension

Reads the consent record your code stored and names every proof field GDPR Article 7(1) needs and your log is missing.

DSA Terms Lint - EU Digital Services Act

VS Code extension

Reads your terms-of-service markdown and names every DSA duty it is missing, by article number.

Swift 6 Concurrency Migration Lint

VS Code extension

11 rules that name the .swift lines Swift 6 language mode rejects — 13 findings, 6 build-blocking, on the 47-line fixture

Jest Snapshot PII Audit

VS Code extension

15 rules that find the real customer data your .snap files committed

BNPL Disclosure Lint - EU CCD2 2026

VS Code extension

22 rules that read your checkout template the way a CCD2 supervisor will from 20 November 2026.

Cargo.toml Publish Gate - crates.io

VS Code extension

Names every crates.io publish blocker in a Cargo.toml before the upload burns a version number.

EPUB Accessibility Metadata Lint (EAA)

VS Code extension

18 rules over the accessibility metadata in your .opf: 12 findings in the sample file, 9 of them errors, 6 of them invented or malformed values

Lit Template Binding Audit

VS Code extension

Finds the lit-html binding positions auto-escaping does not cover, before the component ships

Ingress-NGINX Retirement Lint

VS Code extension

Names the Gateway API field that replaces each retired ingress-nginx annotation — or tells you there isn't one

US State Privacy Scope & Cure Clock 2026

Browser extension · Chrome, Edge, Firefox

Enter your consumer count for one state and get the 2026 answer: covered or not, which prong caught you, and how many days that state's right to cure has left.

SEPA pain.001 Reject Lint

VS Code extension

Find the lines your bank will refuse before you send the batch

Hospital Price Transparency MRF Lint

VS Code extension

15 offline rules read your standard charges JSON the way 45 CFR Part 180 and the CMS template do - the dirty sample returns 17 findings, 15 errors

MAUI iOS Submission Gate

VS Code extension

Reads a .NET MAUI app's iOS Info.plist and Entitlements.plist and names every App Store Review 5.1.1(i) purpose-string rejection and export-compliance defect before the…

FedRAMP OSCAL SSP Lint

VS Code extension

16 checks on a system-security-plan JSON, in your editor, before a validator returns the package

Terraform Provider Pin Lint

VS Code extension

Finds the .tf lines a clean terraform init is still free to move

HIPAA Disclosure Accounting Clock (2026)

Browser extension · Chrome, Edge, Firefox

Type the date the request landed. Get the 60-day deadline, the one 30-day extension date, the six-year lookback start, whether this one is free or fee-eligible, and what…

Accessibility Statement Lint (EU model)

VS Code extension

Checks the accessibility statement you already published against the EU model statement and its two dates

AI Output Disclosure Lint SB 942

VS Code extension

Finds the generative-AI code that drops the disclosures California SB 942 has required since August 2, 2026.

AI Companion Safety Lint

VS Code extension

Reads your companion chatbot's system prompt against California SB 243, New York GBL Article 47, Illinois HB 1806 (WOPR Act) and Nevada AB 406, line by line.

SOUP List Lint (IEC 62304)

VS Code extension

Reads your SOUP register the way an auditor does: 16 rules over clauses 8.1.2, 5.3.3, 5.3.4, 4.3 and 7.1.3.

OTel Collector Drift Lint

VS Code extension

Finds the removed components and renamed attributes in an OpenTelemetry Collector config before the upgrade does

CRA Annex II User Docs Lint

VS Code extension

19 rules over the user documentation that ships with your product: support-period end date, vulnerability reporting contact, EU declaration of conformity address, secure…

Terraform State Secret Leak Lint

VS Code extension

Names the attributes, outputs and backends that copy a cleartext secret into terraform.tfstate

Green Claim Lint - EU EmpCo 2026

VS Code extension

Reads your HTML and Markdown product copy and flags the environmental claims Directive (EU) 2024/825 turns into banned practices on 27 September 2026, with the clause…

CMS-0057 API Gate

VS Code extension

14 rules read a FHIR CapabilityStatement against CMS-0057-F. A 2021 payer statement returned 6 blocking gaps - three of the four APIs missing - and 107 days left to 1…

Postgres Migration Lock Lint

VS Code extension

Names every statement in a Rails, Django or raw SQL migration that takes a table-blocking Postgres lock, and prints the non-blocking rewrite. 36 rules, PostgreSQL 12-17.

MV3 Manifest Preflight - Chrome Web Store

VS Code extension

25 rules over manifest.json: every line Manifest V3 or the Chrome Web Store upload refuses, with the fix beside it.

KSeF FA(3) Invoice Lint

VS Code extension

Finds the lines KSeF will reject in a Polish structured invoice XML, before you send it

AI Model License Lint

VS Code extension

Reads the open-weight model IDs in your code and names the licence clause that binds you - 22 rules, 17 findings on a 33-line fixture

SPF & DMARC Record Lint

VS Code extension

19 offline checks on the SPF, DMARC and DKIM records in your branch — including the DMARC rewrite of May 2026

COPPA 2026 Notice Lint

VS Code extension

18 clauses of the amended COPPA Rule, checked against the notice in your repo

Stale Standard Citation Lint

VS Code extension

Finds the standards and laws your reStructuredText or Markdown docs still cite after they died, and the date each one died; 44 rules, 30 findings in the 57-line sample…

DSAR Deadline Clock - 9 US State Privacy Laws (2026)

Browser extension · Chrome, Edge, Firefox

Type the state and the date the request landed. Get the statutory due date, the extension date, the cure period and the penalty exposure.

SVG Asset Compliance Lint

VS Code extension

14 rules over the SVG files your design tool exported, before they become a legal object

npm Trusted Publish Lint

VS Code extension

Finds the credential in your release workflow that expires before your next release

ERB Escape Audit - Rails XSS lint

VS Code extension

15 rules that find every line in a Rails .erb view where output escaping was switched off or was the wrong escaping.

GPSR Listing Lint

VS Code extension

Audits a product feed row by row against Article 19 of the EU General Product Safety Regulation

TDM Reservation Lint

VS Code extension

Finds the robots.txt lines that reserve nothing — retired crawler tokens, shadowed groups, rules above the first User-agent.

EN 18031 / PSTI Device Config Lint

VS Code extension

Line-by-line check of shipped device defaults against RED Art. 3(3)(d)(e)(f), EN 18031-1/-2/-3 and UK PSTI Schedule 1

.NET EOL & CRA Support Window Gate

VS Code extension

Dates every target framework in a .csproj against Microsoft's end-of-support day and against the support period you promise

SQL Card Data Lint (PCI DSS Req 3)

VS Code extension

Names every column, index, view and seed row in a .sql migration that stores card data, with its PCI DSS Requirement 3 rule id

OpenAPI Security Contract Lint

VS Code extension

Finds the lines in an OpenAPI file that publish an endpoint with no authentication, an API key in the query string, or an OAuth grant RFC 9700 forbids.

security.txt Lint - RFC 9116 + CRA contact point

VS Code extension

13 rules that decide whether a vulnerability report ever reaches you

DORA Register of Information Lint

VS Code extension

24 checks on the register CSV before it reaches the supervisor — LEI check digits, ISO dates and codes, references that resolve

PII-in-Logs Lint (console.log(req.body))

VS Code extension

22 rules that name the lines where a Node or TypeScript service writes personal data into logs, crash reports and analytics — with the article it touches and the…

Kubernetes Removed API Lint

VS Code extension

15 checks for the apiVersions kubectl no longer serves, on the manifest open in your editor

MCP Config Guard - agent config lint

VS Code extension

Reads .mcp.json / .vscode/mcp.json / claude_desktop_config.json while you edit it and marks the lines that hand an AI agent more than you meant - unpinned servers,…

PQC Deprecation Lint — RSA/ECC after 2030

VS Code extension

Dates every RSA, ECDSA, ECDH, DH, DSA, SHA-1, MD5, 3DES and ECB line against NIST IR 8547 (deprecated after 2030, disallowed after 2035) — 19 rules

GDPR Privacy Notice Lint

VS Code extension

16 rules read your privacy.md the way Articles 13 and 14 read it

US State Annual Report Deadline & Late-Fee Check (2026)

Browser extension · Chrome, Edge, Firefox

Pick the state, put in your registration date and how many entities you hold there, and see the 2026 deadline, the penalty if you file today, and the date the state can…

Auto-Renewal Signup Lint (California ARL)

VS Code extension

Sixteen statutory checks on the signup page AB 2863 rewrote, in your editor and in the browser

EU Data Residency Lint (Terraform, GDPR Ch. V)

VS Code extension

Every cloud region in your infrastructure code, mapped to a country and the transfer basis it needs.

DORA Art. 30 ICT Contract Clause Lint

VS Code extension

Twenty-two checks over the ICT vendor contracts in your repository - every missing Article 30 clause named, with the wording to paste in.

NIS2 Incident Runbook Lint (Article 23)

VS Code extension

Reads your incident-response runbook and says which of the three Article 23 clocks it gets wrong

EAA Form Lint: WCAG 2.2 AA for HTML

VS Code extension

Names every WCAG 2.2 AA form failure on its line, with the criterion and the fix

Email Footer Law Lint

VS Code extension

Fourteen checks on an HTML email footer: CAN-SPAM postal address and 10-business-day opt-out, CASL's 60-day window, and German 5 DDG, the statute that replaced 5 TMG on…

Angular Removed-API Lint

VS Code extension

32 checks for Angular APIs that were removed or deprecated, plus the support window on your version pin.

CRA 24/72/14 Reporting Lint (Article 14)

VS Code extension

Reads your SECURITY.md against the EU Cyber Resilience Act reporting clock that started on 11 September 2026 — 24 hours, 72 hours, 14 days, to ENISA and your…

MCP 2026 Migration Lint

VS Code extension

The 2026-07-28 MCP revision removed the initialize handshake, sessions, ping and 4 more RPCs.

Opt-Out Signal Lint for US State Privacy Laws

VS Code extension

Finds the ad and analytics code that keeps firing after a visitor’s browser has already sent Global Privacy Control.

Cloud Cost Landmine Lint for Terraform, CloudFormation and Kubernetes

VS Code extension

Names every line in the file you have open that starts a recurring cloud charge, with the published us-east-1 price and the date it changes by itself.

CSAF Advisory Check for CRA 2026

VS Code extension

Runs all 43 mandatory and profile conformance tests of CSAF 2.0 section 6.1 on the advisory you are writing: product ID graph, revision history, CVSS recomputed from the…

Currency Minor Unit Lint

VS Code extension

Finds the money lines that send the wrong amount to a payment API: the x100 that charges 100x in JPY, the toFixed(2) that truncates KWD, and the currency codes that…

AI Model Retirement Lint

VS Code extension

Finds the LLM model IDs pinned in your code that vendors have already switched off, or have dated to switch off, with the replacement and the date.

Base Image EOL Lint - Dockerfile and CI end-of-life check

VS Code extension

Marks every base image in your Dockerfiles, compose files and CI workflows whose security patches have already stopped - or stop before 13 November 2026 - and prints the…

Runtime EOL and Deploy-Block Audit for Docker, CI and AWS Lambda

VS Code extension

Finds the end-of-life runtimes an AI assistant still writes for you — node:20, python3.9, ubuntu-22.04, nodejs20.x — and prints the exact date each one stops deploying.

Privacy Manifest Lint - xcprivacy & ITMS-91053

VS Code extension

Checks PrivacyInfo.xcprivacy and your C#, Dart, JS, Swift and Kotlin source for Apple required-reason APIs, and decodes all 17 reason codes back to the category they…

HMRC Fraud Prevention Header Lint for Making Tax Digital (VAT and Income Tax)

VS Code extension

Finds the Gov-Client and Gov-Vendor header mistakes HMRC rejects, in your editor, offline, before you send the request.

EN 301 549 Lint — European Accessibility Act rules, with the clause number, inside your editor

VS Code extension

Flags the EN 301 549 clause each line breaks, and separates what is in force today from what arrives with V4.1.1.

SPDX License Field Lint for package.json, pyproject.toml and Cargo.toml

VS Code extension

Reads the licence field in the open manifest and names every deprecated SPDX id, invalid string, PEP 639 leftover and copyleft obligation - with the exact replacement…

License Flip Audit - BUSL/SSPL/AGPL in your deps

VS Code extension

Finds the dependencies whose licence changed under you - Terraform 1.6+ BUSL, Redis 7.4+ SSPL, Bitnami's August 2025 move, Elastic 7.11 - and names the exact version…

Personal Data Map: find every column a GDPR subject access request has to reach

VS Code extension

Reads a migration, Prisma schema, Django model or TypeORM entity and marks every column a subject access request has to reach - with the GDPR article each finding hangs…

Linker Map Auditor - FLASH & RAM budget for GNU ld map files

VS Code extension

Read the .map your linker already wrote and see, in exact bytes, which object file is spending your FLASH and RAM - and by how much you overflowed.

VS Code Marketplace: 12 installs

WCAG 2.1 AA Legal Baseline Audit for templates

VS Code extension

Audits HTML, JSX, Vue, Twig, Blade, ERB and Razor markup against the 24 WCAG 2.1 Level AA checks that 28 CFR 35.200 and EN 301 549 actually name - not WCAG 2.2.

Salesforce API Version & CLI Retirement Lint

VS Code extension

Finds retired API versions and removed sfdx force:* commands in your DX repo before a deploy or a CI run fails with 410 GONE.

PCI Payment Page Script Audit: requirement 6.4.3 and 11.6.1 on your checkout markup

VS Code extension

PCI DSS 4.0.1 requirements 6.4.3 and 11.6.1 have been mandatory since 2025-03-31, and the PCI SSC revised FAQ 1331 on 2026-08-04 so a QSA agreement alone no longer marks…

Consent Mode v2 Lint for GA4 & Google Ads

VS Code extension

Finds the consent-signal bugs that silently switch off Google Ads conversions and remarketing for EEA and UK traffic - in your source, before you ship.

EU AI Act Article 50 Transparency Audit for Your Codebase

VS Code extension

Finds the AI call sites, generation code and system prompts that trigger EU AI Act Article 50 disclosure duties - in force since 2 August 2026.

GitHub Actions Deprecation Lint: the 2026 runner and action EOL dates

VS Code extension

Node 20 is removed from GitHub-hosted runners on 2026-09-23 and ubuntu-22.04 deprecation opens 2026-09-17.

CRA Readiness Audit for EU Cyber Resilience Act

VS Code extension

Flags the lines in your repo that break the EU Cyber Resilience Act - default passwords, disabled TLS checks, floating base images, an expired security.txt - naming the…

Pre-Consent Tracker Audit for EU Client Websites

VS Code extension

Finds the analytics, pixels, fonts and embeds that fire before your cookie banner is answered - in the source, before you deploy. 24 rules.

AI Crawler Rules - robots.txt Audit for AI Search

VS Code extension

Checks robots.txt line by line and says what each AI crawler token actually controls - training, AI-search citation, or user fetch - and which lines silently do nothing.

GNU Global C/C++ .vscode Config Pack

VS Code extension

21 rules that read the values in a shared .vscode folder, plus 45 snippets. VS Code loads a wrong value without a word - this names the line and the fix.

DeviceTree Config Audit: 23 dtc-Style Rules, 50 Snippets

VS Code extension

status = "ok" compiles clean and the node never appears. 23 rules over 7 config languages, on the file you have open.

Connection String & Secret Audit — 8 Stacks

VS Code extension

26 rules and 32 safe-replacement snippets for hardcoded connection strings, keys and kubeconfigs across 8 VS Code stacks. Runs on your machine and sends nothing anywhere.

Config & DSL Lint + Snippets — 9 Sets

VS Code extension

Your config files are never compiled — nothing fails until deploy. 36 snippets and 28 lint rules for 9 of them, inside the editor, offline.

Manifest Snippets + Removed-API Audit (8 Sets)

VS Code extension

For platform engineers on AKS: 28 rules naming every removed apiVersion, literal credential and :latest tag in the file you have open, and 40 snippets written against…

Outlook Email HTML Lint - Classic vs New

VS Code extension

Classic Outlook renders with the Word engine, the new Outlook with WebView2. Lint one email file against both at once, line by line, before you send.

Tax Year Constant Drift

VS Code extension

Finds the tax years, statutory limits, filing thresholds, rates and deadlines hardcoded in payroll and invoicing code - the constants an AI assistant completes from a…

Membership Plugin for WordPress: 20-Type Member & Data-Request Desk for Clubs, Estate Agents and Restaurants

WordPress plugin

Your visitor picks one of 20 request types — sign-up, renewal, viewing, invoice, table booking, or a data request under GDPR, DSGVO, LGPD or RGPD. GDPR Art.

Hugging Face Model Licence Matrix — all 70 model-card `license:` identifiers × the 4 questions a commercial release turns on

Copy the `license:` string off the model card, read four rows, close the review ticket — 70 identifiers, 4 questions, 280 rows, every row naming the clause it came from.

More collections

All tools