similary i also solved the local search for all AI IDE tools i used and built a proactive memory and its all local completely and rest encrypted. myinventory.site

Can you share some highlights of what it can do? (I’m just asking the agent to review the pr usually)

How is this different from bandit or gitlab sast?

Seems to be mixing up linting with code review - though this does lint only the changes which is an option (I prefer to lint the whole codebase though)

I've never seen this idiom before:

  try:
      AVOUCH_VERSION = importlib.metadata.version("avouch")
  except importlib.metadata.PackageNotFoundError:
      AVOUCH_VERSION = "0.3.2"

What's the intended purpose? It seems to be protecting against a scenario where the package is not installed but the CLI is somehow running...

...But that seems like a very odd thing to be concerned about. Plus, unless I'm missing something, the program will crash with an an ImportError before that block can ever run.