
Security News
/Research
Popular node-ipc npm Package Infected with Credential Stealer
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.
devforgeai
Advanced tools
Spec-driven development framework for AI-assisted software development with zero technical debt. Enforces TDD workflows, quality gates, architectural constraints, and anti-pattern prevention across 34 skills, 47+ agents, and 47+ slash commands.
Transform vague business ideas into production-ready code with zero technical debt.
DevForgeAI is a development framework for Claude Code that enforces TDD, quality gates, and architectural constraints across the entire software lifecycle. It works with any technology stack.
Interactive Demo | Full Documentation
# Install into your project
npx devforgeai install
# Open in Claude Code Terminal, then:
/create-context my-project # Set up architectural constraints
/create-story user-authentication # Create a spec'd user story
/dev STORY-001 # Build it with enforced TDD
/qa STORY-001 deep # Validate quality
Or start from scratch with a vague idea:
/brainstorm "I want to build a marketplace for local artisans"
# The framework guides you from idea -> requirements -> architecture -> code -> release
Explore the full development pipeline, TDD cycle, quality gates, and architecture — all interactive, right in your browser.
AI coding assistants are powerful but undisciplined. Without guardrails, they make autonomous technology decisions, skip tests, and accumulate technical debt faster than any human team.
DevForgeAI fixes this with three mechanisms:
1. Constitutional Context Files — 6 immutable documents define your approved technologies, directory structure, dependencies, coding standards, architecture constraints, and forbidden anti-patterns. The AI cannot deviate without an approved Architecture Decision Record.
2. Mandatory TDD — Every feature goes through a 10-phase cycle: write failing tests first, implement minimum code to pass, refactor, verify acceptance criteria, run integration tests. No shortcuts.
3. Quality Gates — 4 checkpoints block progression until standards are met. Coverage thresholds (95% business logic, 85% application, 80% infrastructure) are enforced as blockers, not warnings.
/brainstorm to /release, every workflow step has a dedicated command./rca command with 5 Whys methodology when things go wrong./collaborate generates portable documents for sharing issues with other LLMs.Prerequisites: Node.js >= 18, npm >= 8, Git, Claude Code Terminal
# Recommended
npx devforgeai install
# From source
git clone https://github.com/bankielewicz/DevForgeAI.git
cd DevForgeAI && npm install
node bin/devforgeai.js install /path/to/your-project
# Global
npm install -g devforgeai
devforgeai install
After installing, run /create-context my-project in Claude Code to generate your constitutional context files interactively.
/brainstorm Vague idea -> structured problem discovery
|
/ideate Problem -> requirements (functional + non-functional)
|
/create-context Requirements -> 6 constitutional constraint files
|
/create-epic Constraints -> feature decomposition
|
/create-story Features -> implementable stories with acceptance criteria
|
/dev Story -> TDD implementation (10 phases, enforced)
|
/qa Code -> quality validation (coverage, security, patterns)
|
/release Validated code -> production deployment
| Topic | Location |
|---|---|
| All 47+ commands | Commands Reference |
| Architecture & subagents | Architecture Guide |
| API documentation | API Reference |
| Troubleshooting | Troubleshooting Guide |
| Project roadmap | Roadmap |
| Competitive analysis | Research |
/create-story -> /dev -> /qaSee CONTRIBUTING.md for full guidelines.
If DevForgeAI has been useful, consider buying me a coffee!
MIT License — see LICENSE for details.
Built with Claude Code — Spec-driven development with 47+ subagents, 34 skills, and zero tolerance for technical debt.
FAQs
Spec-driven development framework for AI-assisted software development with zero technical debt. Enforces TDD workflows, quality gates, architectural constraints, and anti-pattern prevention across 34 skills, 47+ agents, and 47+ slash commands.
We found that devforgeai demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
Socket detected malicious node-ipc versions with obfuscated stealer/backdoor behavior in a developing npm supply chain attack.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.