Open source by Vatsal Shah

Five open-source CLIs that check your work before you ship it.

Security, UI and accessibility, architecture, agent evaluation, and release readiness. Each page explains the tool. npm is the install. GitHub is the source.

Pick a tool GitHub profile npm profile
Published packages
5
Licence
Apache-2.0
npm weekly downloads, combined
3,254

Live npm weekly downloads and the latest npm version, plus GitHub stars and the package.json version, fetched 2026-11-07 20:26 UTC. Cached 10 minutes. Weekly downloads cover 2026-10-31 to 2026-11-06, not a lifetime total.

npx [email protected] audit .npm install -g [email protected]npx github:shahvatsalofficial/archsutra-ai audit .npm install -g [email protected]npx [email protected] demo

Pick the tool by the job

Every card links to a page with the plain-language explanation, a diagram, commands, limits, and FAQ.

  • Security

    VigilSutra AI

    Find leaked secrets and risky config before you push.

    Offline, read-only auditor for source, CI, containers, Kubernetes, Terraform, and AI-agent setup. The CLI does not call the network.

    • Offline
    • Read-only
    • 42 rules
    npx [email protected] audit .
    1,542 weekly downloads · v0.4.0 How it works
  • UI/UX and accessibility

    RachnaSutra AI

    Catch accessibility and responsive problems in front-end code.

    UI/UX, accessibility, and responsive audit agent skills plus a keyless CLI. Docs describe version 0.5.1.

    • Keyless CLI
    • 33 rules
    • 13 skills
    npm install -g [email protected]
    609 weekly downloads · v0.5.1 How it works
  • Architecture

    ArchSutra AI

    Get an evidence-tagged architecture and threat-model review.

    Architecture audit, design, and threat-modeling skills for Claude Code, Cursor, Codex, GitHub Copilot, and Gemini CLI, plus an offline CLI.

    • Offline CLI
    • 19 rules
    • 12 role contracts
    npx github:shahvatsalofficial/archsutra-ai audit .
    622 weekly downloads · v0.1.4 How it works
  • QA and release

    PramanaSutra AI

    Check release readiness, then hand the decision to a person.

    QA and release-readiness check. It reads files, does not run the project tests, writes four copies of one audit, then stops for a person.

    • No test run
    • 5 rules
    • 17 skills
    npm install -g [email protected]
    481 weekly downloads · v0.3.4 How it works
  • Agent evaluation

    EvalSutra AI

    Grade a recorded agent trace against rules you wrote first.

    Evidence-first, keyless, offline agent evaluation CLI plus 18 portable agent skills. It grades recorded observations. It does not run the agent and does not call a model. npm published 0.3.0 on 2026-11-07. The git package.json on that day said 0.3.1.

    • Offline
    • 18 skills
    • 11 assertions
    npx [email protected] demo
    0 weekly downloads · v0.3.0 How it works

Where each tool fits

One suggested order from design to release. Use any tool on its own.

Suggested order of the five tools Design with ArchSutra AI. Build with RachnaSutra AI and VigilSutra AI. Evaluate a recorded agent trace with EvalSutra AI. Check release readiness with PramanaSutra AI. A person approves the release. 1 Design ArchSutra AI Architecture and threat model 2 Build RachnaSutra AI · UI VigilSutra AI · security 3 Evaluate EvalSutra AI Recorded trace, not a live run 4 Release PramanaSutra AI A person still approves
  1. DesignArchSutra AI reviews architecture and threats.
  2. BuildRachnaSutra AI checks UI and accessibility. VigilSutra AI checks security.
  3. EvaluateEvalSutra AI grades a recorded agent trace. It does not run the agent.
  4. ReleasePramanaSutra AI checks readiness. A person approves.

How these tools behave

As stated on each project page.

  • Local by design

    The CLIs read your files and write reports. The project pages say no network call, no telemetry, and no API key.

  • Honest about limits

    Each page lists what the tool does not do. A clean report is not proof of security, accessibility, or readiness.

  • Evidence you can read

    Reports come out as Markdown, HTML, JSON, and SARIF 2.1.0, so people and pipelines can use the same result.

Questions

Which open-source projects are on this site?

5 public repositories under github.com/shahvatsalofficial, each published on npm by shahvatsal: VigilSutra AI (vigilsutra 0.4.0), RachnaSutra AI (rachnasutra 0.5.1), ArchSutra AI (archsutra-ai 0.1.4), PramanaSutra AI (pramanasutra 0.3.4), EvalSutra AI (evalsutra 0.3.0). Live npm weekly downloads and the latest npm version, plus GitHub stars and the package.json version, fetched 2026-11-07 20:26 UTC. Cached 10 minutes. Weekly downloads cover 2026-10-31 to 2026-11-06, not a lifetime total.

Do these tools need an API key?

The project pages say the CLIs run offline with no API key and no telemetry. Agent skills, where a tool has them, use the model already available in Claude Code, Cursor, Codex, GitHub Copilot, or Gemini CLI.

Where are the install and documentation pages?

Each detail page explains the tool. GitHub is the source repository and npm is the install. The npm user profile is https://www.npmjs.com/~shahvatsal.

Read the code. Run the tools. Tell me what breaks.

Issues and stars on GitHub help most. Packages live on npm under shahvatsal.

GitHub npm Contact
WhatsApp