PQC Deprecation Lint — RSA/ECC after 2030

Runs the same checker as our npm package on a Node.js runtime that pip installs for you (nodejs-wheel-binaries) - no system Node.js needed. Your files are checked locally.

Dates every quantum-vulnerable algorithm in your code against the NIST IR 8547 clock: deprecated after 2030-12-31, disallowed after 2035-12-31.

Install

pqc-deprecation-lint file

Node 18+. The same 17 rules as the VS Code extension, from a terminal or CI.

Free

• Check the file open in the editor and see every quantum-vulnerable algorithm in it, with line numbers and each one dated against the NIST IR 8547 clock for a date you choose
• --rules lists every rule

With a licence ($29 once)

• Sweep the whole workspace in one pass and write a dated migration report file you keep — the artifact for a customer security questionnaire, a migration ticket, or next quarter's diff

pqc-deprecation-lint --dir ./templates --report html --out report.html

A security consultant doing the same cryptographic inventory by hand bills $150-$250 an hour, and the first pass over one repository is a day

Use from an AI agent (MCP)

Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:

{ "mcpServers": { "pqc-deprecation-lint": { "command": "pqc-deprecation-lint", "args": ["--mcp"] } } }

Tools: check_text and check_file (free) · check_dir (licence). The agent gets every finding with the line number.

Use in CI

- name: PQC Deprecation Lint — RSA/ECC after 2030
  run: pip install rulestamp-pqc-deprecation-lint && pqc-deprecation-lint --dir . --ci

The folder sweep, reports and CI mode need one licence — one payment, no subscription. Set READYSTACK_LICENSE=<key> or run --license <key> once.

Get a licence

Install (PyPI)

pip install rulestamp-pqc-deprecation-lint
pqc-deprecation-lint --help