TrueMend — The AI Code Quality Engine

Your codebase is 40% AI-generated. Most of it has bugs you haven't found yet.

The Problem

AI coding tools write code fast. They also:

• Wrap everything in try-catch blocks that swallow errors silently
• Leave console.log debugging statements in production code
• Generate redundant comments that describe what the code does, not why
• Copy-paste similar logic 15 times instead of extracting a function
• Add defensive checks that can never fail
• Leave placeholder TODOs that look like finished code
• Generate 300-line functions no human would write

You can't see it. Your team can't review it all. Your CI doesn't catch it.

The Solution

git clone https://github.com/alsajoo/truemend.git
cd truemend
pip install -e .
truemend .

TrueMend finds AI-generated code quality issues using AST analysis — no LLM calls, no API keys, no cloud. It runs in seconds, finds the patterns humans miss, and can fix many of them automatically.

$ truemend src/

  Health 6.6/10  |  47 files  |  312 issues  (1 high, 38 medium)

Severity  Pattern                    File                Line  Description
--------  -------------------------  ------------------  ----  ---------------------------------------
high      guardrails_pii_no_filter   src/api/handler.py  142   LLM output returned without PII filter
high      ai_unchecked_tool_output   src/api/handler.py  88    Tool output used without validation
medium    slop_redundant_comment     src/utils.ts        15    Comment restates the code below it
medium    unnecessary_try_catch      src/db/query.ts     34    try-catch wraps code that can't throw

  ... 308 findings hidden (use --verbose to show all)

What TrueMend Detects

Detection specs covering the things AI gets wrong most often:

22 languages: TypeScript, TSX, JavaScript, Python, C#, Go, Rust, Java, Kotlin, Swift, Dart, Ruby, Bash, SCSS, PowerShell, SQL, Dockerfile, YAML, C, CPP, PHP, and Terraform.

Plus framework-specific patterns for React, Next.js, Flutter, Django, FastAPI, Express, Spring Boot, and 60+ more frameworks — including deep Microsoft/.NET coverage: ASP.NET Core, EF Core, Blazor, Azure Functions, Semantic Kernel, Microsoft.Extensions.AI, Azure OpenAI, Azure AI Foundry, and ML.NET.

Fix It Automatically

Many issues don't need human review. TrueMend fixes them with deterministic AST transforms — guaranteed correct, zero risk:

truemend fix src/ --apply

Built-in transforms: remove try-catch-rethrow, strip console.log, remove unused imports, convert var to const/let, eliminate double negation, and more. Every transform produces a unified diff and verifies the result re-parses cleanly. Original source restored on failure.

AI Code Analysis

TrueMend understands AI patterns specifically — not just generic code quality:

• 20 semantic dimensions via Python AST analysis: runtime resilience, error transparency, concurrency safety, data completeness, code quality
• AI/LLM detection specs: OpenAI, Bedrock, voice AI, and more (additional provider surfaces ship opt-in)
• Agent framework patterns: missing retries, unbounded context, tool output validation, state management
• AI debt score: measures what percentage of your codebase shows AI-generated patterns and how severe they are

truemend slop src/              # focused AI slop detection
truemend src/ --verbose         # show all findings including low severity
truemend src/ --ci              # exit 0/1/2 for CI pipelines

Works Where You Work

CLI

truemend .                      # analyze current directory
truemend src/ --quick           # metrics only (<2s)
truemend fix src/ --apply       # apply safe fixes
truemend audit .                # deep quality audit

MCP Server (Claude Code, Cursor, Copilot, etc.)

{
  "mcpServers": {
    "truemend": {
      "command": "npx",
      "args": ["-y", "truemend-mcp"]
    }
  }
}

Or via Claude Code CLI:

claude mcp add truemend -- npx -y truemend-mcp

The npx truemend-mcp launcher auto-bootstraps the Python engine (via uv or pip) — no manual Python setup needed. See full setup guide for Cursor, VS Code, and more.

Skills (Agent Overlays)

TrueMend ships instruction files that teach your AI coding agent how to drive the analyze → fix → verify loop:

truemend install-skill --agent claude     # Claude Code (default)
truemend install-skill --agent cursor     # Cursor
truemend install-skill --agent copilot    # GitHub Copilot
truemend install-skill --all              # all 10 supported agents

Supported agents: Claude Code, Cursor, Copilot, Codex, Windsurf, Gemini, Aider, Roo, Amazon Q, Zed. Each overlay writes the right file for that agent (.cursorrules, AGENTS.md, .github/copilot-instructions.md, etc.).

Once installed, your agent gets a /truemend command set — next (jump to the highest-impact issue), fix, verify, dashboard. Ask it to review your code and it'll work the remediation loop without you typing CLI commands.

Framework skills add detection intelligence for specific stacks. They auto-load when TrueMend detects the framework in your project, but you can install them explicitly:

truemend skill list                       # browse 67 built-in skills
truemend skill install react              # add to ./.truemend/skills/

Framework skills cover React, Next.js, Django, FastAPI, Flask, Express, Spring Boot, Prisma, Drizzle, Kubernetes, Terraform, and more. See creating skills to author your own.

CI/CD

# GitHub Actions
- uses: alsajoo/truemend-engine@v1.1.2
  with:
    targets: 'src/'
    aggression: 'recommended'

# Pre-commit hook
repos:
  - repo: https://github.com/alsajoo/truemend-engine
    rev: v1.1.2
    hooks:
      - id: truemend

Three-Tier Fix System

Not every issue should be fixed the same way:

TrueMend knows which tier each issue belongs in. You don't have to decide.

Plans

TrueMend is open-core. Everything you need to find and fix AI code issues is free, forever — the paid tiers add reporting, constrained-LLM refactors, deeper structural analysis, and team features.

Free is for individuals — analyze, fix, and run as an MCP server in your editor, no account or API key. Pro and Max add the reporting and deeper analysis for power users; Teams layers on multi-seat org features for companies. Clone and pip install -e . to run.

Why TrueMend, Not [X]?

Benchmarking data: See VERIFIED_METRICS.md for current performance metrics, precision rates, and speed measurements.

Quick Start

pip install truemend
cd /path/to/your-project
truemend .

No config, no API keys, no setup. Installing from source instead? See CONTRIBUTING.md.

Development

pip install -e ".[dev]"
pytest tests/ -x -q           # 11,716+ tests
python cli.py src/            # analyze TrueMend itself

License

MIT