From the workbench.

Notes on analysis, safe fixes, and keeping codebases true: from the people building the engine.

2026-07-22

81 detections we were silently throwing away

The line-scan engine treated # and // as comment markers in every language, truncating URLs in Bash and private fields in TypeScript. Language-aware stripping recovered 81 real findings across 2,915 files, with zero new false positives.

→

2026-07-18

note

TrueMend is on PyPI, and it is open-core

pip install truemend. Every AST analysis, every detection spec, the deterministic fixes, the MCP server and SARIF/CI integration are free forever. Pro and Max buy reporting and judgment, not detection.

→

2026-03-25

note

Introducing Truemend: deterministic code quality at scale

At launch: 5,449 anti-patterns across 144 specs. 22 languages. Three-tier remediation. AST-level pattern matching gives us the precision of a compiler with the breadth of a linter. Meet the engine.

→

2026-03-20

note

Why three tiers? The science behind safe code remediation

Every code quality tool finds issues. The hard part is fixing them without breaking things.

→

2026-03-18

note

MCP-native: why zero infrastructure matters

SonarQube needs a server. CodeClimate needs a cloud. Truemend runs as an MCP server over stdio, inside your editor: zero latency, zero configuration, zero data exposure.

→

more from the workbench soon · rss available