Project Doctor

Imprint

Who wrote it, how to reach them, and under what terms.

Author

Project Doctor was written by Mesut Kişi.

Contact

Feedback, questions and false alarm reports: [email protected]

Licence

Project Doctor is © 2026 Mesut Kişi and offered under AGPL-3.0-only.

Commercial licence for organisations that cannot meet the AGPL-3.0 terms: [email protected]

Version

Version 0.1.0. It is built from the repository; there is no package on npm.

A caution

Project Doctor is a second pair of eyes, not a replacement for a security audit. Finding nothing does not mean the code is safe; what we can't see is written under "What it doesn't do".

Changelog

Below is the summary of version 0.1.0.

What 0.1.0 is

  • 95 rules in 11 categories. 51 are verified against real projects or paired cases; 44 are marked doğrulanmamış (unverified) in the README, with the reason. 2 of the 95 are off unless asked for (--online, --experimental-idor).
  • 7 experimental growth-risk rules (--experimental-scale, and the scale command), off by default.
  • Known limits are listed and reported. The README names 14 limits of the tool; when a limit cuts a rule's results short, the scan says so in its output.
  • The same engine runs in a browser. All 95 rules can run in a page, in a Web Worker, over a folder or a .zip; 4 of them need a readable .git/index and say so when they do not run. Nothing is uploaded.
  • A static site (web/, Turkish and English) wraps that engine: drop a folder, read the result, download the report.
  • Report schema 3. Reports are JSON, Markdown, HTML, SARIF or terminal text.