Dev Quality Gates

Dev Quality Gates is an open-source, CC0-licensed repository maintained by mokevnin. It recommends one tool (rarely two) for each quality-enforcement job, from linters and type checkers to secrets scanning and architecture rules. Entries are generated from a tools.json file that records review dates, sources and limitations.

What It Is

It is a curated recommendations list, not an Awesome List and not a universal stack. Entries are grouped by language (JavaScript and TypeScript, Python, Go, Rust, Ruby, PHP, Java, Kotlin, .NET, Swift, Elixir, Shell) and by cross-cutting category such as databases, API contracts, secrets, vulnerabilities, dependency updates, Docker/Terraform/Kubernetes, policy, git hooks and documentation. A tool qualifies only if it can fail a build with a non-zero exit code when a standard is violated. The list also favors fast native toolchains and tools with non-interactive, machine-readable output.

Applying it with a coding agent

The README gives a prompt to hand to an AI coding agent from the repository root. The agent follows docs/adopt.md, inspects the project, selects only the fitting entries and shows a plan before changing anything. It then wires the checks into hooks and CI and proves each one can fail. Setup patterns for hooks, CI and generated-code gates are in docs/patterns.md for those who prefer to do it manually.

How the list is maintained

A weekly workflow flags archived repositories, old pushes and stale releases as a signal rather than a verdict. Replacing a tool requires a written comparison. A section called Under review lists categories with no recommendation yet, such as container image scanning and IaC security, and explains why they remain open. Tools that were considered and rejected are documented separately.