Dont Be Lazy

Dont Be Lazy scans a repository for lint, type-checking, security, formatting, coverage, and test suppressions that were probably meant to be temporary and then forgotten. It helps teams find blanket ignores, stale skips, config-level exclusions, and other "we'll clean this up later" decisions before they become permanent.

What it can find

• Inline suppressions such as # noqa, # type: ignore, # nosec, # nosemgrep, # fmt: off, and skipped tests.
• Config-level suppressions such as ignored rules, per-file ignores, and excluded paths.
• Risky patterns like file-wide ignores, blanket suppressions, non-strict xfail, and vulnerability audit ignores.
• Age and ownership signals using git blame, git history, and baseline files.

Installation

pipx install dont_be_lazy

Or with pip:

pip install dont_be_lazy

For local development:

git clone https://github.com/matthewdeanmartin/dont_be_lazy.git
cd dont_be_lazy
uv sync --all-extras

Quick usage

Show the CLI:

dont_be_lazy --help

Scan a repository:

dont_be_lazy scan .

Focus on higher-risk suppressions:

dont_be_lazy scan . --risk high

Summarize findings by tool:

dont_be_lazy summary . --by tool

Find stale suppressions with git history:

dont_be_lazy stale . --older-than 180d --with-git-history

Create and check a baseline:

dont_be_lazy baseline create . --output .dont-be-lazy-baseline.json
dont_be_lazy baseline check . --baseline .dont-be-lazy-baseline.json

Review active policy rules:

dont_be_lazy rules list
dont_be_lazy rules test .

Export machine-readable output:

dont_be_lazy scan . --format sarif --output dont-be-lazy.sarif

Commands

Output formats

scan supports table, json, jsonl, markdown, and sarif. Other commands support the subset that fits their output, so it can plug into terminal workflows, CI logs, dashboards, and code-scanning tools.

Documentation

• Documentation site
• Project overview
• Installation
• Quick start
• Contributing

License

MIT — see LICENSE.

Changelog

See CHANGELOG.md.