Skip to main content

PassShore Engine

中文:AI 代码质量的守门人。167 条标准 + 7 个深度扫描器 + 自适应质量门禁。 English: AI code quality gatekeeper. 167 standards + 7 deep scanners + adaptive Quality Gate.


📖 中文说明

这是什么?

PassShore Engine 是 PassShore 的质量检测核心引擎。它把 AI 生成的代码和人类编写的代码放在同一个质量标尺下衡量——用行业标准工具(bandit、radon、ruff)而非自创规则。

核心能力

模块 功能
167 条标准 覆盖安全、架构、API、数据、权限、性能、合规、等保、DSMM
7 个深度扫描器 依赖漏洞、BOLA/BFLA、OpenAPI、GraphQL、协议合规、Secrets、SAST
Quality Gate 自适应阈值门禁,按项目成熟度(骨架→成长→稳定→成熟)自动调整
FixPR 自动修复代码问题并生成 PR
技术债评估 基于行业基准的量化技术债计算

安装

pip install passshore-engine

需要 Python ≥ 3.11。

快速使用

# 全量分析
from passshore_engine.analyzers.industry_analyzer import run_full
result = run_full("/path/to/your/project")
print(f"质量评分: {result['quality_score']}")
print(f"安全问题: {result['summary']['security_issues']}")

# 合规检查 + 质量门禁
from passshore_engine import ComplianceChecker
import asyncio
checker = ComplianceChecker(project_id="my_project")
results = asyncio.run(checker.check_target("http://localhost:8000"))

许可证

MIT


📖 English

What is this?

PassShore Engine is the core quality inspection engine for PassShore. It measures AI-generated and human-written code against the same quality standards — using real industry-standard tools (bandit, radon, ruff) rather than custom rules.

Key Features

Module Purpose
167 Standards Security, architecture, API, data, permission, performance, compliance
7 Deep Scanners Dependency vulns, BOLA/BFLA, OpenAPI, GraphQL, protocol, secrets, SAST
Quality Gate Adaptive thresholds — auto-tunes by project maturity (Skeleton → Growth → Stable → Mature)
FixPR Auto-fix code issues and generate PRs
Tech Debt Quantified tech-debt assessment against industry baselines

Installation

pip install passshore-engine

Requires Python ≥ 3.11.

Quick Start

# Full analysis
from passshore_engine.analyzers.industry_analyzer import run_full
result = run_full("/path/to/your/project")
print(f"Quality score: {result['quality_score']}")

# Compliance check + Quality Gate
from passshore_engine import ComplianceChecker
import asyncio
checker = ComplianceChecker(project_id="my_project")
results = asyncio.run(checker.check_target("http://localhost:8000"))

License

MIT

Metadata

Release files for passshore-engine 0.1.4

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for passshore-engine 0.1.4
File Size Uploaded Provenance
passshore_engine-0.1.4.tar.gz 346.8 kB Without provenance Details

Release files / passshore_engine-0.1.4.tar.gz

Download URL passshore_engine-0.1.4.tar.gz
Size 346.8 kB
Tags Source
SHA-256 checksum
How to use checksums
ec389d907060abef05c39db44c8f2baabb5a7b2a6832fa8ca43313b797f9a358
BLAKE2b-256 checksum
How to use checksums
340e234c2153e2192a1e91998df42bde1f5192947d29e9bdd14f57d0f38f3c21
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
No
Uploaded via twine/6.2.0 CPython/3.12.13

Security for passshore-engine 0.1.4

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

No provenance found

None of the files in this release were uploaded with provenance metadata.

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page