How it works

The audit

Point TrueMend at a directory. It reads every supported file:

truemend audit src/

This produces findings grouped by severity, with per-function quality scores.

Understanding results

TrueMend reports findings at five severity levels:

• Critical: Issues that cause bugs or security holes
• High: Patterns that make the code harder to change
• Medium: Code smells and maintainability concerns
• Low: Style issues and minor improvements
• Info: The lowest-consequence tier. Hidden by default; pass -v/--verbose to see it.

Each finding includes:

• The file and line number
• The pattern that matched
• The fix path (patch, refactor, or rewrite)
• A suggested remediation

Three kinds of fix

Patches: Safe, mechanical changes applied for you. Reversible. The file still compiles, or the original is restored.

truemend fix src/ --apply

Without --apply, fix previews the changes and writes nothing — run it bare first to see the diff, then add --apply to commit it.

Refactors: Known changes with a bounded scope. Reviewed with your team before they land.

Rewrites: Evidence-backed recommendations in the audit. Never applied automatically.

Reporting

A report with per-function scoring, before/after comparisons, and an executive summary:

truemend report --format pdf --client "Acme Corp" --project "Platform" --tier 1

Continuous monitoring

TrueMend runs as a check on every pull request:

truemend audit src/ --ci
# exit 0 = pass, 1 = fail, 2 = warning