CodeDrift

Details

External ID

47260551

Source

HN

Company

—

Product

CodeDrift

Website domain

npmjs.com

Launched

March 5, 2026

Cohort

—

Upvotes

5

Upvotes percentile

0.1070110701107011

Tags

—

Fetched at

Sept. 7, 2026, 9:26 p.m.

Updated at

Sept. 7, 2026, 9:26 p.m.

Description

Hi HN,I built *CodeDrift*, a CLI tool that detects bugs commonly introduced by AI coding assistants like Copilot, Cursor and ChatGPT.Over the last year I noticed that AI tools often generate code that compiles correctly, passes linting and looks reasonable in code review but still contains subtle issues.Some common examples I kept seeing:* async `forEach` loops that never await promises * missing authorization checks (IDOR) * hallucinated dependencies that don’t exist * stack traces leaking sensitive information * request data used without validationThese bugs often slip past ESLint, TypeScript and even human reviewers because the code looks correct.CodeDrift parses the code using the TypeScript compiler API and runs a set of detectors looking for these patterns.Example:``` async function syncProducts(items) { items.forEach(async (item) => { await updateStock(item.id); }); } ```CodeDrift output:``` CRITICAL: async forEach does not await promises Fix: use Promise.all or a for...of loop ```Another example it detects:``` Database query using user-supplied ID without authorization check → potential IDOR vulnerability ```The goal isn’t to replace tools like ESLint or TypeScript, or security scanners like Snyk. It’s meant to act as a safety layer for code generated with AI assistants.The tool runs locally, requires no cloud access, and can be tried with:``` npx codedrift ```I’d love feedback from developers who are using AI coding tools in production.

• Source listing
• Website