PassShore Engine
中文:AI 代码质量的守门人。167 条标准 + 7 个深度扫描器 + 自适应质量门禁。 English: AI code quality gatekeeper. 167 standards + 7 deep scanners + adaptive Quality Gate.
📖 中文说明
这是什么?
PassShore Engine 是 PassShore 的质量检测核心引擎。它把 AI 生成的代码和人类编写的代码放在同一个质量标尺下衡量——用行业标准工具(bandit、radon、ruff)而非自创规则。
核心能力
| 模块 | 功能 |
|---|---|
| 167 条标准 | 覆盖安全、架构、API、数据、权限、性能、合规、等保、DSMM |
| 7 个深度扫描器 | 依赖漏洞、BOLA/BFLA、OpenAPI、GraphQL、协议合规、Secrets、SAST |
| Quality Gate | 自适应阈值门禁,按项目成熟度(骨架→成长→稳定→成熟)自动调整 |
| FixPR | 自动修复代码问题并生成 PR |
| 技术债评估 | 基于行业基准的量化技术债计算 |
安装
pip install passshore-engine
需要 Python ≥ 3.11。
快速使用
# 全量分析
from passshore_engine.analyzers.industry_analyzer import run_full
result = run_full("/path/to/your/project")
print(f"质量评分: {result['quality_score']}")
print(f"安全问题: {result['summary']['security_issues']}")
# 合规检查 + 质量门禁
from passshore_engine import ComplianceChecker
import asyncio
checker = ComplianceChecker(project_id="my_project")
results = asyncio.run(checker.check_target("http://localhost:8000"))
许可证
MIT
📖 English
What is this?
PassShore Engine is the core quality inspection engine for PassShore. It measures AI-generated and human-written code against the same quality standards — using real industry-standard tools (bandit, radon, ruff) rather than custom rules.
Key Features
| Module | Purpose |
|---|---|
| 167 Standards | Security, architecture, API, data, permission, performance, compliance |
| 7 Deep Scanners | Dependency vulns, BOLA/BFLA, OpenAPI, GraphQL, protocol, secrets, SAST |
| Quality Gate | Adaptive thresholds — auto-tunes by project maturity (Skeleton → Growth → Stable → Mature) |
| FixPR | Auto-fix code issues and generate PRs |
| Tech Debt | Quantified tech-debt assessment against industry baselines |
Installation
pip install passshore-engine
Requires Python ≥ 3.11.
Quick Start
# Full analysis
from passshore_engine.analyzers.industry_analyzer import run_full
result = run_full("/path/to/your/project")
print(f"Quality score: {result['quality_score']}")
# Compliance check + Quality Gate
from passshore_engine import ComplianceChecker
import asyncio
checker = ComplianceChecker(project_id="my_project")
results = asyncio.run(checker.check_target("http://localhost:8000"))
License
MIT
Metadata
Release files for passshore-engine 0.1.4
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| passshore_engine-0.1.4.tar.gz | 346.8 kB | Without provenance | Details |
Release files / passshore_engine-0.1.4.tar.gz
| Download URL | passshore_engine-0.1.4.tar.gz |
|---|---|
| Size | 346.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
ec389d907060abef05c39db44c8f2baabb5a7b2a6832fa8ca43313b797f9a358
|
|
BLAKE2b-256 checksum How to use checksums |
340e234c2153e2192a1e91998df42bde1f5192947d29e9bdd14f57d0f38f3c21
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
| Uploaded via |
twine/6.2.0 CPython/3.12.13
|
Security for passshore-engine 0.1.4
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.