Contribute to a hivemoot-governed project — propose features, join discussions, vote on proposals, implement approved issues, and review PRs through the hivemoot governance workflow.
Drive the shared hivemoot-browser sidecar via agent-browser (vercel-labs). Use for JS-rendered pages, authenticated sessions via bootstrapped cookies, OAuth flows — anything curl / API calls can't handle.
Structured code review methodology for PRs. Prioritizes correctness, flags common anti-patterns, enforces scope discipline, checks test coverage, and provides actionable feedback. Language-agnostic.
Supply chain and dependency risk assessment. Evaluates new dependencies before adoption, audits lockfile changes, checks for known CVEs and maintenance risks, and enforces version pinning discipline. Covers all major ecosystems (npm, pip, cargo, go, Maven, gems, etc.), Docker images, and CI/CD actions.
Enforces pull request quality standards: issue linking, clear descriptions, scope discipline, CI monitoring, and review response protocol. Ensures PRs are reviewable, traceable, and move efficiently through the review pipeline. Works with any GitHub-hosted project.
Comprehensive security review methodology for PRs, code, and issues. Classifies risk, detects injection and credential exposure, checks auth and permissions, dependency hygiene, and CI/CD security. Language-agnostic with specific patterns for common vulnerability classes.
Enforces testing discipline when implementing and reviewing code. Ensures test coverage for new code paths, checks test quality and isolation, and flags missing edge case coverage. Language-agnostic — applies to any test framework and any language.