
Research
/Security News
Coruna Respawned: Compromised art-template npm Package Leads to iOS Browser Exploit Kit
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.
devforgeai
Advanced tools
DevForgeAI is a spec-driven development framework designed to enable AI-assisted software development with zero technical debt through automated validation, architectural constraints enforcement, and test-driven development workflows.
Transform vague business ideas into production-ready code with zero technical debt.
DevForgeAI is a development framework for Claude Code that enforces TDD, quality gates, and architectural constraints across the entire software lifecycle. It works with any technology stack.
Interactive Demo | Full Documentation
# Install into your project
npx devforgeai install
# Open in Claude Code Terminal, then:
/create-context my-project # Set up architectural constraints
/create-story user-authentication # Create a spec'd user story
/dev STORY-001 # Build it with enforced TDD
/qa STORY-001 deep # Validate quality
Or start from scratch with a vague idea:
/brainstorm "I want to build a marketplace for local artisans"
# The framework guides you from idea -> requirements -> architecture -> code -> release
Explore the full development pipeline, TDD cycle, quality gates, and architecture — all interactive, right in your browser.
AI coding assistants are powerful but undisciplined. Without guardrails, they make autonomous technology decisions, skip tests, and accumulate technical debt faster than any human team.
DevForgeAI fixes this with three mechanisms:
1. Constitutional Context Files — 6 immutable documents define your approved technologies, directory structure, dependencies, coding standards, architecture constraints, and forbidden anti-patterns. The AI cannot deviate without an approved Architecture Decision Record.
2. Mandatory TDD — Every feature goes through a 10-phase cycle: write failing tests first, implement minimum code to pass, refactor, verify acceptance criteria, run integration tests. No shortcuts.
3. Quality Gates — 4 checkpoints block progression until standards are met. Coverage thresholds (95% business logic, 85% application, 80% infrastructure) are enforced as blockers, not warnings.
/brainstorm to /release, every workflow step has a dedicated command./rca command with 5 Whys methodology when things go wrong./collaborate generates portable documents for sharing issues with other LLMs.Prerequisites: Node.js >= 18, npm >= 8, Git, Claude Code Terminal
# Recommended
npx devforgeai install
# From source
git clone https://github.com/bankielewicz/DevForgeAI.git
cd DevForgeAI && npm install
node bin/devforgeai.js install /path/to/your-project
# Global
npm install -g devforgeai
devforgeai install
After installing, run /create-context my-project in Claude Code to generate your constitutional context files interactively.
/brainstorm Vague idea -> structured problem discovery
|
/ideate Problem -> requirements (functional + non-functional)
|
/create-context Requirements -> 6 constitutional constraint files
|
/create-epic Constraints -> feature decomposition
|
/create-story Features -> implementable stories with acceptance criteria
|
/dev Story -> TDD implementation (10 phases, enforced)
|
/qa Code -> quality validation (coverage, security, patterns)
|
/release Validated code -> production deployment
| Topic | Location |
|---|---|
| All 46 commands | Commands Reference |
| Architecture & subagents | Architecture Guide |
| API documentation | API Reference |
| Troubleshooting | Troubleshooting Guide |
| Project roadmap | Roadmap |
| Competitive analysis | Research |
/create-story -> /dev -> /qaSee CONTRIBUTING.md for full guidelines.
If DevForgeAI has been useful, consider buying me a coffee!
MIT License — see LICENSE for details.
Built with Claude Code — Spec-driven development with 44 subagents, 26 skills, and zero tolerance for technical debt.
FAQs
Spec-driven development framework for AI-assisted software development with zero technical debt. Enforces TDD workflows, quality gates, architectural constraints, and anti-pattern prevention across 34 skills, 47+ agents, and 47+ slash commands.
The npm package devforgeai receives a total of 2 weekly downloads. As such, devforgeai popularity was classified as not popular.
We found that devforgeai demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.

Company News
As AI accelerates how code is written and shipped, Socket is scaling to protect the software supply chain from the growing wave of attacks targeting open source dependencies.

Company News
Socket is scaling to defend open source against supply chain attacks as AI accelerates software development.