What ships with it
A pattern catalog
YAML rules, embedded at compile time, compiled to regex and matched line by line. Each finding carries a rule ID, location, severity, and fix suggestion.
Wraps the real tooling
Complexity, coverage, and vulnerability checks for Go and PHP behind one structured API, with text, JSON, or JSONL output.
Language-aware scanning
Walks the tree, detects language by file extension, and skips vendor, node_modules, .git, and testdata.
Standalone
Zero framework dependencies — built on core/cli for scaffolding only, and runs anywhere as core-lint.
Surface area
Match the catalog against a file or tree; emit text, JSON, or JSONL findings.
vet, lint, and test in one pass.
Structured Go and PHP quality APIs.
The standalone checker, built from the catalog.
Scan a tree
Rules live as YAML in the catalog, embedded at build time. core lint emits text, JSON, or JSONL findings; the toolkit adds complexity, coverage, and vulncheck.