vercel-labs/deepsec
GitHubDeepsec is a security harness for finding vulnerabilities in your codebase powered by coding agents
- Stars:
- 8.3k
- Language:
- TypeScript
- Default branch:
- main
- Last scored:
74.6
Overall
At a glance
- Rank
- #122 of 401
- Top 30% · #35 of 82 TypeScript repos
- Checks passed
- 9 of 17
- Full list below
- Best set up for
- Pi
- Score 79.9
- Needs most work for
- Aider
- Biggest fix: .aider.conf.yml (+14.1 pts)
What it has
What it's missing
What to fix first
Showing fixes for Claude Code
- 1Type configurationAdd a type config (tsconfig.json for JS/TS, mypy.ini or pyrightconfig.json for Python). Rust/Go/JVM/Scala/Swift/C#/OCaml/Haskell/Zig are typed by default.+7.9 pts
- 2Pre-commit / git hooksSet up pre-commit (.pre-commit-config.yaml), husky, or lefthook to run format+lint on every commit.+5.3 pts
- 3Reproducible dev envAdd a Makefile or devcontainer or Dockerfile so the agent can set up the project in one command.+4.7 pts
Score for each AI agent
Each agent weighs the checks by its own docs. Under each score are its top three. How each agent is scored →
Does vercel-labs/deepsec have agent instructions?
An AGENTS.md (or CLAUDE.md) at the root tells AI coding agents how to build, test and work in the repo. A few agents also read a file of their own.
- AGENTS.md / CLAUDE.md
CLAUDE.md(new tab) · 1,855 characters- Agent-specific files
.agents/skills(new tab) (1 skill)No GEMINI.md, .cursor/rules, .openhands/setup.sh or .aider.conf.yml- Repos that have one
- 62 of 82 TypeScript repos · 221 of 401 repos on the leaderboard · See examples →
All 17 checks · 9 passed
✓
Skills (.agents/skills)· 100% pass
1 skill in .agents/skills/
✓
✗
.aider.conf.yml· 0% pass
No .aider.conf.yml at repo root
✓
✓
✗
Cursor rules (.cursor/rules)· 0% pass
No .cursor/rules/*.mdc or .cursorrules
✓
~
✗
GEMINI.md· 0% pass
No GEMINI.md at repo root
✓
✓
✗
.openhands/setup.sh· 0% pass
No .openhands/setup.sh
✗
Pre-commit / git hooks· 0% pass
No pre-commit / husky / lefthook found
✓
Manageable size· 100% pass
467 files
~
✗
Type configuration· 0% pass
No type config found
How vercel-labs/deepsec compares
- vs leaderboard average
- 7.8 pts above
- Average 66.8
- vs TypeScript average
- 3.4 pts above
- Average 71.2
- Stars among TypeScript repos
- #71 of 82
Missing here, and how many repos have it
- Type configuration · passed by 68% of leaderboard repos, 68% of TypeScript repos
- Pre-commit / git hooks · passed by 29% of leaderboard repos, 48% of TypeScript repos
- Cursor rules (.cursor/rules) · passed by 4% of leaderboard repos, 13% of TypeScript repos
Passes checks most repos miss
- Skills (.agents/skills) · only 17% of repos pass it
- Manageable size · only 16% of repos pass it
One fix for the most agents: Type configuration would raise the score for all 9 agents, by up to 11.5 points.
Similar repos
Same language and host as this repo, closest in overall score.
- TypeScript · 9.3k ★
- colinhacks/zod75.8TypeScript · 44.3k ★
- hsnice16/tula75.3TypeScript · 0 ★
- TypeScript · 38.8k ★
- TypeScript · 224.5k ★
- expo/expo74.0TypeScript · 53.3k ★
Add a badge to your README
Paste this at the top of the README. It shows the score, and links back to this page.
[](https://agentfriendlycode.com/repo/github/vercel-labs/deepsec)Check the score on every pull request
A GitHub Action posts one comment per pull request with how the score changed and why.