verid 0.4.0

Verid - Security auditing and formatting tool for developers
verid-0.4.0 is not a library.

๐Ÿ” Verid

Crates.io Downloads License Rust

โšก Fast. Minimal. Deterministic.
One CLI to format and audit your codebase.


โœจ What is Verid?

Verid is a high-performance CLI tool built in Rust that combines:

  • ๐Ÿงน Code formatter
  • ๐Ÿ” Security & quality auditor

into one unified workflow.

No config hell.
No plugin overload.
Just clean, fast, deterministic tooling.


๐Ÿ’ก Why Verid?

Because modern dev workflows are messy.

You usually need:

  • formatter
  • linter
  • security scanner
  • style checker

โžก๏ธ Verid merges all of that into one single binary.

๐Ÿง  Designed for:

  • โšก Fast CI pipelines
  • ๐Ÿงช Deterministic codebases
  • ๐Ÿ” Secure development practices
  • ๐Ÿงน Clean formatting standards

๐Ÿ”ฅ Core Features

๐Ÿงน Formatting Engine

  • Stable & idempotent formatting
  • Indentation normalization
  • Line width wrapping
  • Multi-rule runner system

๐Ÿ” Audit Engine

  • Static code scanning
  • Security issue detection
  • Reliability checks
  • Code smell detection

๐Ÿง  Smart Filtering

  • --only-fail โ†’ show only critical issues
  • --lang <ext> โ†’ filter by language
  • --format json โ†’ CI-friendly output

โšก CLI First Design

  • Zero config required
  • Script-friendly
  • Extremely fast execution
  • Parallel scanning using Rayon

๐Ÿ“ฆ Installation

From crates.io

cargo install verid

From Source

git clone https://github.com/sushiguard/verid
cd verid
git install --path .

๐Ÿš€ Usage

๐Ÿงน Format code

verid format src/

Check only (CI mode):

verid format src/ --check

๐Ÿ” Audit Code

verid audit src/

Only show critical issues:

verid audit src/ --only-fail

Filter by language:

verid audit src/ --lang rs 

JSON output (for CI pipelines):

verid audit src/ --format JSON

Combine everything:

verid audit src/ --lang rs --only-fail --format JSON

๐Ÿงช CI Integration

Verid is designed for CI.

Example (GitHub Actions)

- name: Run Verid Audit
  run: verid audit . --only-fail --format JSON

Exit codes:

Code Meaning
0 No critical issues
1 Critical issues found

๐Ÿง  Architecture

src/
 โ”œโ”€โ”€ formatter/
 โ”‚    โ”œโ”€โ”€ indent.rs
 โ”‚    โ”œโ”€โ”€ whitespace.rs
 โ”‚    โ”œโ”€โ”€ width.rs
 โ”‚    โ””โ”€โ”€ runner.rs
 โ”‚
 โ”œโ”€โ”€ audit/
 โ”‚    โ”œโ”€โ”€ scanner.rs
 โ”‚    โ”œโ”€โ”€ detector.rs
 โ”‚    โ”œโ”€โ”€ reporter.rs
 โ”‚    โ””โ”€โ”€ mod.rs
 โ”‚
 โ”œโ”€โ”€ cli.rs
 โ””โ”€โ”€ main.rs

Internal Engines

Engine Responsibility
Scanner File discovery + language detection
Detector Static analysis rules
Reporter Output builder (Text/JSON)
Runner Formatting rule executor

โš™๏ธ Philosophy

Verid follows strict engineering principles:

  • Deterministic โ†’ same input, same output
  • Minimal โ†’ no unnecessary features
  • Composable โ†’ rule-based architecture
  • Fast โ†’ parallel execution with Rayon
  • Strict โ†’ security-first scanning rules

๐Ÿ›  Development

Run checks:

cargo check
cargo clippy -- -D warnings
cargo test

Format code:

cargo fmt 

๐Ÿ—บ Roadmap (v0.4+)

  • Config file (verid.toml)
  • Ignore patterns (.veridignore)
  • Custom rule plugins
  • SARIF output format
  • Git pre-commit hooks
  • Language expansion (Go, Java, etc)

๐Ÿค Contributing PRs are welcome.

Steps:

  1. Fork repository
  2. Create branch
  3. Implement feature
  4. Ensure: ยฐ cargo fmt ยฐ cargo clippy -- -D warnings ยฐ cargo check ยฐ cargo test
  5. Open PR

๐Ÿ” Security

If you find a vulnerability:

Please report responsibly via issue or private contact.


๐Ÿ“„ License

MIT License


โค๏ธ Acknowledgements

Built with โค๏ธ using Rust. Inspired by modern dev tooling:

  • rustfmt
  • clippy
  • eslint
  • cargo-audit

โญ Support

If you like Verid:

  • โญ Star the repo
  • ๐Ÿ“ฆ Use it in your projects
  • ๐Ÿ’ป Share with other devs

๐Ÿš€ Verid

Clean code. Secure code. Fast workflow.