Big News: Socket raises $60M Series C at a $1B valuation to secure software supply chains for AI-driven development.Announcement
Sign In

@rigour-labs/cli

Package Overview
Dependencies
Maintainers
4
Versions
84
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@rigour-labs/cli

CLI quality gates for AI-generated code. Forces AI agents (Claude, Cursor, Copilot) to meet strict engineering standards with PASS/FAIL enforcement.

Source
npmnpm
Version
4.3.3
Version published
Weekly downloads
319
-38.65%
Maintainers
4
Weekly downloads
 
Created
Source

@rigour-labs/cli

npm version npm downloads License: MIT

Local-first quality gates for AI-generated code.
Rigour forces AI agents to meet strict engineering standards before marking tasks "Done".

Core gates run locally. Deep analysis can run local or cloud provider mode.

🚀 Quick Start

npx @rigour-labs/cli scan     # Zero-config scan (auto-detect stack)
npx @rigour-labs/cli init     # Initialize quality gates
npx @rigour-labs/cli check    # Verify code quality
npx @rigour-labs/cli run -- claude "Build feature X"  # Agent loop

🍺 Homebrew

brew tap rigour-labs/tap
brew install rigour

🛑 The Problem

AI agents often fall into "Vibe Coding"—claiming success based on narrative, not execution:

  • Agent makes a change
  • Agent claims "Task 100% complete"
  • CI Fails with type errors, lint failures, or broken tests

Rigour breaks this cycle by forcing agents to face the same verification tools (ruff, mypy, vitest) that CI runs—locally and immediately.

🔄 How It Works

Agent writes code → Rigour checks → FAIL? → Fix Packet → Agent retries → PASS ✓

⚙️ Quality Gates

Structural & Security Gates

GateDescription
File SizeMax lines per file (default: 300-500)
HygieneNo TODO/FIXME comments allowed
ComplexityCyclomatic complexity limits (AST-based)
Required DocsSPEC.md, ARCH.md, README must exist
File GuardProtected paths, max files changed
Security PatternsXSS, SQL injection, hardcoded secrets, command injection
Context AlignmentPrevents drift by anchoring on project patterns

AI-Native Drift Detection (v2.16+)

GateDescription
Duplication DriftNear-identical functions across files — AI re-invents what it forgot
Hallucinated ImportsImports referencing modules that don't exist (JS/TS, Python, Go, Ruby, C#)
Inconsistent Error HandlingSame error type handled differently across agent sessions
Context Window ArtifactsQuality degradation within a file — clean top, messy bottom
Async & Error SafetyUnsafe async/promise patterns, unhandled errors across 6 languages

Multi-Language Support

All gates support TypeScript, JavaScript, Python, Go, Ruby, and C#/.NET.

🛠️ Commands

CommandPurpose
rigour scanZero-config stack-aware scan using existing gates
rigour initSetup Rigour in your project
rigour checkValidate code against quality gates
rigour check --ciCI mode with appropriate output
rigour hooks initInstall real-time hooks for supported tools
rigour hooks check --files ...Run fast hook gates on specific files
rigour explainDetailed explanation of validation results
rigour runSupervisor loop for iterative refinement
rigour studioDashboard for monitoring
rigour indexBuild semantic index of codebase patterns

🤖 Works With

  • Claude Code: rigour run -- claude "..."
  • Cursor / Cline / Gemini: Via MCP server (rigour_check, rigour_explain)

📖 Documentation

📚 Full Documentation →

Quick Links
Getting StartedInstall and run in 60 seconds
CLI ReferenceAll commands and options
ConfigurationCustomize quality gates
MCP IntegrationAI agent setup

🧪 CI Integration

- run: npx @rigour-labs/cli check --ci

📜 License

MIT © Rigour Labs

"Rigour adds the engineering."

Keywords

quality-gates

FAQs

Package last updated on 05 Mar 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts