待翻译：An offline code scanner with a Node.js network guard to block cloud leaks

AI 服务暂时不可用，以下为来源正文，待恢复后补全翻译。

SimpleBeacon — Turn AI Code Debt Into Audit Evidence Before Regulators Find It SimpleBeacon AI Safety for AI-Coded Teams Turn AI Code Debt Into Audit Evidence Before Regulators Find It. SimpleBeacon catches the slop before it reaches production. It detects mock data in production, fake KPI logic, placeholder code, and unsafe sample paths in the editor, then blocks bad commits at the gate. See the demo → Start 14-Day Free Trial → Book a walkthrough → No credit card required · Full Developer tier · Cancel anytime Editor diagnostics Pre-commit enforcement Local-first Offline-safe The problem isn’t syntax. It’s AI-generated slop. Compilers catch broken syntax. They do not catch fake KPI logic, placeholder code, or sample files accidentally wired into production paths. 🧱 Mock data in production AI-generated handlers read from fixtures and sample JSON files that look valid but were never meant for production use. 📈 Fake KPI logic Analytics endpoints invent conversion numbers and business metrics that pass a glance review but should never be trusted. 🧩 Placeholder code TODO and FIXME markers are left behind, creating hidden technical debt and broken logic paths that slip through review. Catch the issue where the code is created. SimpleBeacon analyzes code in the editor the moment it is written, before it leaves the developer's machine. 🧪 Broken code example AI-generated dashboard code reads from mock sample paths and invents KPI values at runtime. It looks plausible, but it is structurally unsafe. const METRICS_DATA_PATH = './fixtures/sample-metrics.json'; const USER_ANALYTICS_PATH = './mock/user-analytics-sample.json'; const conversionRate = '75 %'; 🛡️ Editor diagnostics SimpleBeacon lights up the Problems panel instantly and flags the risky patterns before a human review ever sees the file. SimpleBeacon AI Slop Cop FAIL (5 block) mock/sample path detected fake KPI logic detected placeholder TODO/FIXME found The pre-commit gate blocks the bad commit. Even if the developer misses the editor warning, SimpleBeacon still catches it at the gate. $ git add src/dashboard-api.cjs $ git commit -m "add dashboard" [pre-commit-gate] Gate scan failed (exit 1). Commit blocked. SimpleBeacon detected mock data, fake KPI logic, and placeholder drift. Bad code does not reach the branch. Fix it once. Keep the pipeline clean. Once the issue is addressed, the project re-runs the local gate and passes cleanly. $ node demo/swap-dashboard.cjs fixed $ npx simplebeacon scan --gate --format json --offline [PASS] SimpleBeacon gate passed. No blocking issues detected. Safe code stays in flow. The fix is applied, the gate passes, and the branch remains clean. What SimpleBeacon does for engineering teams A lightweight, local-first safety layer for AI-assisted development. 🧠 Editor diagnostics Instant local analysis that catches risky AI-generated code before review. 🚫 Pre-commit enforcement Blocks dirty commits before they pollute the branch or trigger expensive CI failures. 🛡️ Local-first workflow Runs in the workspace or browser sandbox, with no code upload required. 📋 Security and compliance guardrails Supports review workflows for teams that need auditability and safer AI adoption. Stop guessing what your AI assistants are committing. SimpleBeacon catches the issues before they become expensive. Book a demo → Start free → $10,000 Consultant vs. $149 SimpleBeacon Same compliance evidence. Fraction of the cost. No procurement delay. Traditional Consultant Write Fast → Fail in CI → Fix Later $10,000 + weeks of delay Developers push AI code instantly. The CI pipeline breaks on an un-isolated credential or a missing dependency. A senior dev pulls the branch, manually cleans formatting slop, and restarts the staging queue. Every cycle costs hours of senior engineering time. SimpleBeacon Auto-Fix Pre-Commit → Clean Pass → Ship $149 / board-ready certificate Local heuristic engine intercepts code pre-commit. simplebeacon fix strips markdown fences, quarantines secrets, and wraps crashing slop before code reaches pull requests. No upload, no round-trip, no vendor data custody. Pipeline delay: seconds, not hours. What's Your EU AI Act Exposure? The EU AI Act caps fines at €35 million or 7% of global annual turnover. Calculate your risk in seconds. Engineering team size Annual revenue (USD) Max Fine (7% turnover) $7.0M Estimated AI-Slop Incidents/Yr ~150 SimpleBeacon Cost/Yr $1,788 A 50-developer team generating ~150 AI-slop incidents/year faces up to $7.0M in EU AI Act fines. SimpleBeacon catches them pre-commit for $1,788/yr — a 3,913x risk-to-cost ratio. Run Your Free Audit Now → Estimates based on EU Regulation 2024/1689 Article 99. AI-slop rate: ~3 incidents/dev/month. SimpleBeacon Team Pro: $149/mo × 12. Not legal advice. Who Uses SimpleBeacon? From code compliance to content integrity — one platform, three audiences. ✏ Content & Marketing Catch embarrassing “As an AI language model” phrases, hallucinated statistics, markdown fence leakage, and broken formatting before publishing. ⚖ HR & Legal Operations Screen incoming proposals, contracts, and job applications for unedited AI-generated text and compliance red flags before they reach decision-makers. Software & Tech Teams Eradicate AI code debt, placeholder debris, credential leaks, and structural slop that traditional linting misses — with board-ready compliance certificates. Try It Now: Paste Any Text No upload. No signup. Scan runs 100% in your browser. Detect AI artifacts, placeholder text, and LLM tells in emails, reports, and documents. Paste text above to begin scanning. Uses the same 48 analyzers and 25 scan engines from SimpleBeacon's code scanner, adapted for plain text. No text is sent to any server — scanning runs entirely in your browser. Scan Your Repository in Real Time Watch SimpleBeacon detect and auto-fix regulatory violations, token leaks, and algorithmic redundancy before they reach your main branch. src/api/handler.ts — Code Editor // AI-generated handler — contains slop export async function handleRequest(req: Request) { const apiKey = "sk-ant-api03-xxxxx"; // ← leaked credential const data = await fetch(apiKey); // TODO: implement error handling // ← placeholder return Response.json(data); } — scanning — simplebeacon — scan log $ simplebeacon scan . --gate --format json → Loading 52 rule engines... → Scanning src/api/handler.ts ⚠ CRITICAL: Hardcoded API key (sk-ant-*) ⚠ MEDIUM: Unimplemented TODO placeholder ✓ Auto-fix: credential quarantined to .env ✓ Auto-fix: placeholder flagged for remediation → Gate: PASS (2 fixed, 0 blocking) → Certificate ready: B+ grade terminal — install & scan $ npm install -g simplebeacon $ simplebeacon scan . --gate --format json --output report.json → 48 analyzers loaded · 25 scan engines · 6,000 files scanned in 90s ✓ Gate: PASS · Quality Score: 87/100 · Grade: B+ $ simplebeacon fix --dry-run → 2 auto-fixes ready: credential quarantine, placeholder removal Want to clean your own code? Run simplebeacon fix --dry-run locally, or install the free CLI and get the VS Code extension. The Compliance Gaps AI Creates AI-assisted development accelerates shipping, but introduces regulatory and technical liabilities that auditors will find. SimpleBeacon catches them first. 🔧 Algorithmic Redundancy & Maintenance Risk Repetitive boilerplate, hallucinated endpoints, and dead code that inflates technical debt and security surface area. 🔑 Credential & Token Exposure Hardcoded secrets, API keys, and authentication tokens embedded in AI-generated code or buried in commit history. 📄 Prompt Leakage & Input/Output Debris Leftover markdown fences, chat history, and AI system prompts that leak into source code and reveal your development patterns. ⚖️ Regulatory Compliance Violations Code patterns that breach the EU AI Act, SOC 2 Type II, or your organization's governance frameworks—before an audit finds them. Audit in Three Steps Gate. Scan. Certify. No install required for the browser-local preview. 1 Gate Enter your token to verify access and unlock certificate generation. 2 Scan Drop your repo folder or upload a CLI report for browser-local heuristic analysis. 3 Certify Get a graded A–F report with actionable remediation and a shareable PDF/ZIP certificate. Start Your Audit → Why Compliance Teams Deploy SimpleBeacon Privacy-first scanning. Enterprise audit trails. Automated remediation roadmap. 🛡 Zero-Upload Architecture All scanning runs locally in your browser or on your own server. Source code and secrets never leave your network. Technical Specs Browser sandbox uses WebAssembly regex engines. CLI server runs on Node.js with optional npm audit integration. No telemetry calls during scan. 🏆 Audit-Ready Certificates Generate SOC 2–compliant, EU AI Act–certified reports with one click. Hand auditors proof, not promises. Technical Specs PDF/ZIP certificate includes signed integrity hash, severity distribution, and remediation roadmap. simplebeacon scan --gate --format json output. 🔧 Browser + CLI Hybrid Quick browser scans for triage. Full AST parsing on a local CLI for deep dependency analysis. Technical Specs Browser: 52 regex rule engines. CLI: AST parsing via tree-sitter, npm audit, and full file analysis. npx simplebeacon scan . --complete ⚡ Edge Execution Speed 6,000 files scanned in under 90 seconds on local hardware. Compliance guardrails stay invisible to your team. Technical Specs No network round-trip. Files processed in-memory via streaming. Benchmark: 6,000 tracked files across a full-stack monorepo in 89s on local hardware. 🔒 Air-Gapped Firewall Mode Run full compliance scans in physically isolated networks with zero network calls. Technical Specs Pre-warm registry cache on a connected machine, export via USB, import into air-gapped env. simplebeacon scan --offline --air-gapped silences all telemetry and license validation. ⚙ CI Pipeline Generators Auto-detect repo layout and generate drop-in CI workflow files for GitHub Actions, GitLab CI, and Bitbucket. Technical Specs npx simplebeacon init --with-ci scaffolds environment-aware pipeline configs with gate scans, artifact uploads, and PR summaries. 🤖 Deterministic Auto-Remediator 1 [truncated for AI cost control]