NovaCheck
Trust scores for AI-generated code
NovaCheck launched on August 9, 2026 with 3 votes, #2,940 of 23,274 launches that month and more than 50% of that year's launches.
What it does
AI coding tools make it incredibly easy to ship code. They also make it incredibly easy to ship code you don’t fully understand. NovaCheck is a local-first trust scanner for AI-generated code. It looks for signals such as: * 👻 Ghost dependencies * 🔐 Exposed secrets * ⚠️ Dangerous code sinks * 🤖 AI-generated security patterns * 📦 Dependency and project inconsistencies * 📊 SARIF-compatible findings NovaCheck runs locally, so your source code doesn’t need to leave your machine.
Local-first CLI that catches hallucinated npm/PyPI packages — including install commands in docs and agent files — before you install them. Also: secrets, sinks, SARIF, CI. - arankair/NovaCheck
The AI invented a dependency. Someone else can register it. NovaCheck finds package names your project references but that do not exist — before you install them. npx novacheck . Requires Node.js 20+ . No account, no upload, no config. This repository ships a deliberately broken project. Run the scanner on it: git clone https://github.com/NovaCoding-G/NovaCheck.git cd NovaCheck npx novacheck examples/ai-slop --ghosts BLOCKED Trust Score 0/100 Ghost packages 6 package references do not resolve to a real package ✗ phantom-migrate (npm, does not exist) · AGENTS.md:9 npx phantom-migrate --apply ✗ dotenvv (npm, looks like "dotenv") · package.json:13 ✗ axios-retry-helper (npm, does not exist) ·…from github.com
Does a similar job
all alternatives →
We built an AI to review your pull requests2025 · infinitcode.ai · ▲53Hey HN, We’re two developers (co-founders) with a team of 20 who got tired of spending hours reviewing PRs, so we built Infinitcode.ai, an AI-powered code reviewer that: - *Summarizes PRs in plain English*: No more deciphering 1,000-line diff jungles - *Catches more than bugs*: Security holes, performance pitfalls, code smells, even typos (yes, we’ll flag “vurnerabilities” and vulnerabilities) - *Zero onboarding*: Works instantly—no “let me learn your codebase for weeks” nonsense. Why we’re posting: We’re in alpha and need brutal honesty. Roast our tool, mock our UI, or tell us why AI will…
AI Code Detector – detect AI-generated code with 95% accuracy2025 · code-detector.ai · ▲72Hey HN, I’m Henry, cofounder and CTO at Span (https://span.app/). Today we’re launching AI Code Detector, an AI code detection tool you can try in your browser. The explosion of AI generated code has created some weird problems for engineering orgs. Tools like Cursor and Copilot are used by virtually every org on the planet – but each codegen tool has its own idiosyncratic way of reporting usage. Some don’t report usage at all. Our view is that token spend will start competing with payroll spend as AI becomes more deeply ingrained in how we build software, so understanding how…
Vibecheck – lint for AI-generated code smells (JS/TS/Python)Mar 2026 · github.com · ▲7I built a CLI that detects patterns AI coding tools leave behind: empty catch blocks, hardcoded secrets, as any everywhere, comments that restate the code, god functions, SQL concatenation. 24 rules across JS/TS and Python. Zero config, runs offline, regex-based so it's fast. npx @yuvrajangadsingh/vibecheck . Also ships as a GitHub Action for inline PR annotations and standalone binaries (no Node required). Why: CodeRabbit found AI-generated PRs have 1.7x more issues than human PRs. Veracode says 45% of AI code samples have security vulnerabilities. "Vibe coding" is everywhere now…
More ai this month
the category →
Paintings by AI models: programs run through a simulation of oil paint.
AI · 21d ago · stillwet.art
PixVerse R2▲381A real-time world model you can explore and change
AI · 29d ago · world.pixverse.video
Source: Product Hunt launch ↗
Launched alongside, August 2026
the whole month →- TL
Life & fun · Aug 2026 · louisabraham.github.io
Clipto MCP▲655Hey HN, We recently built Clipto. It’s a tool that lets you search over terabytes of video, audio, and images on your computer, without relying on the cloud. Motivation: we probably all had this similar experience, we know a moment exists in a video or audio, but finding it takes hours scrubbing the timeline. You can send all the media to process in the cloud, but it’s slow, expensive and raises privacy concerns. So we decided to build our own on-device media search engine. How it works (high level): 1. We ingest video, audio, image; normalize formats via ffmpeg; run content analysis to…
Work · Aug 2026 · clipto.com
Hello HN! I found that picking out plausible but diverse skin tones for my digital art and game development projects was kind of difficult, and I got curious about if there was a way to define a color space that made it easy. I've built a color picker and procedural generation algorithm based on the space as well as a bunch of other fun js features and demos throughout the page that use the equations. If you find it interesting, I have lots of explanations of how I built it and what properties the space has. The methodology might be a bit shaky, but hopefully the result is as helpful for…
Life & fun · Aug 2026 · toneyalexander.github.io
Astute▲606Automate your B2B brand going viral, with new media creators
AI · Aug 2026 · company-app.joinastute.com