TrueMend

Find the bugs your AI coding assistant left behind — deterministically, offline, in seconds.

TrueMend reads your code as a syntax tree and reports what is wrong with it — swallowed exceptions, leftover debug statements, duplicated logic, unguarded LLM output, dead code. It never calls a language model to decide what is a defect, so the same input always produces the same findings, and nothing leaves your machine.

Then it fixes what can be fixed safely, and tells you honestly which problems need a human.

Install

pip install truemend

Or run it with no install at all — as an MCP server inside your editor:

claude mcp add truemend -- npx -y truemend-mcp

Standalone binaries for Linux, macOS and Windows are attached to every release.

Use it

truemend .                  # analyze the current directory
truemend audit .            # full quality audit with a readiness verdict
truemend fix src/ --apply   # apply only the fixes proven safe

A real run looks like this:

  Health score:      93.4/100
  Files analyzed:    247
  Anti-patterns:     639

  PRODUCTION READINESS: READY WITH WARNINGS

  Warnings:
    [WARN] 2 high-severity findings
    [WARN] 18 dead code blocks (114 lines)
    [WARN] 208 duplicate clusters (404 functions)

  Passing:
    [PASS] No critical-severity anti-patterns
    [PASS] No empty catch blocks
    [PASS] No hardcoded secrets detected

No configuration file, no API key, no account, no network call.

What it looks for

The detector library is generated into facts.json and currently carries 4,709 detectors across 24 languages:

Beyond pattern matching, it also does whole-project analysis: an import and call graph, duplicate-cluster detection, orphaned-file detection, and 20 behavioural dimensions derived from the Python AST.

Full inventory: Features · Languages & frameworks

How it fixes things

Not every problem deserves the same treatment, so TrueMend sorts every finding into one of three tiers and never blurs the line between them:

Where it runs

# .github/workflows/truemend.yml
- uses: alsajoo/truemend-engine@v1.3.0
  with:
    targets: 'src/'

Documentation

Licensing in one paragraph

TrueMend is open core. The engine is Apache 2.0 — src/, cli.py, truemend_mcp.py, and the launchers. The detection content is Elastic 2.0 — the anti-pattern library and the agent skills. Internal use, modification and self-hosting are all permitted; reselling TrueMend as a hosted service is not. pip install truemend includes the core-language detectors; the framework, AI/LLM, database and DevOps libraries require a licence.

LICENSING.md is the authoritative map of which licence covers which path. docs/editions.md explains what each edition actually contains.