🛡️ Code Guardian Pro for Visual Studio Code

Catch Problems Before They Ship. Professional, 100% offline, privacy-focused code quality and security static analysis for Visual Studio Code.

Code Guardian Pro is a production-grade Visual Studio Code extension engineered to detect critical security vulnerabilities (OWASP Top 10 & CWE Top 25), code smells, duplicate code, and structural complexity right inside your editor — before code ever reaches review or ships to production.

🔒 100% Local Privacy Guarantee

Air-Gapped Ready & 100% Offline: No source code or telemetry is ever transmitted to external servers.
Zero Paid Subscriptions or APIs: Built strictly on free, local analysis engines.
Zero Friction: Install and analyze immediately without any mandatory accounts or API keys.

🚀 Key Modules & Capabilities

1. 🛡️ Local Security Vulnerability Scanner (OWASP & CWE)

CWE-798 / Hardcoded Secrets: Detects AWS credentials, GitHub tokens, private cryptographic keys, and database connection strings.
CWE-89 / SQL Injection: Detects dynamic string interpolations and unparameterized SQL queries.
CWE-78 / OS Command Injection: Detects hazardous process executions with dynamic inputs.
CWE-22 / Path Traversal: Catches unsanitized file paths.
CWE-79 / Cross-Site Scripting (XSS): Flags unsafe .innerHTML assignments with automated safe refactoring.

2. ⚡ Safe Fix Engine with Diff Previews

Automated Safe Fixes: One-click non-destructive refactoring directly in VS Code.
Side-by-Side Diff Preview: Compare suggested fixes before applying them.
Full Undo Support: Standard VS Code history (Ctrl+Z / Cmd+Z).

3. 📉 Code Complexity & Duplication Engine

Cyclomatic & Cognitive Complexity: Identify hard-to-maintain functions and excessive nesting.
Token-based Code Duplication: Catch duplicate blocks across your workspace.

4. 📊 Interactive Dashboard & Exportable Reports

Visual health scores (A through F rating).
Export professional reports in HTML, Markdown, and JSON.

📄 License

Licensed under Apache 2.0. Developed by Radwan Almsora.