
Security News
Agent Baseline Publishes Security Reference Architecture for Software Factories
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.
nestlens-cli
Advanced tools
NestLens is an offline-first developer tool that analyzes NestJS projects and creates an interactive architecture map.
Understand modules, controllers, providers, and dependencies without reading thousands of lines of code.
No cloud. No AI. No source code upload. Everything runs locally.
Visualize your NestJS application structure as an interactive SVG graph.
Select any node to see:
Always-visible project summary:
Press Cmd+K (macOS) or Ctrl+K (Windows) to search across all nodes.
After analysis, NestLens automatically runs architectural insight rules:
Insights appear as a count in the status bar. Click to toggle the Insights panel, which shows severity-grouped cards with affected node links.
# Install globally
npm install -g nestlens-cli
# Or use npx (no install required)
npx nestlens-cli ./my-project
git clone https://github.com/rostislaw9/nestlens.git
cd nestlens
pnpm install
pnpm build
# If installed globally
nestlens-cli ./examples/basic-project
# If using npx
npx nestlens-cli ./examples/basic-project
# From source
pnpm nestlens ./examples/basic-project
The browser opens automatically with the architecture graph.
To skip browser auto-open:
nestlens-cli ./examples/basic-project --no-browser
# or
npx nestlens-cli ./examples/basic-project --no-browser
npx nestlens-cli /path/to/your/nestjs-project
NestJS Project
↓
Scanner (file discovery + tsconfig loading)
↓
Analyzer (module, controller, provider detectors)
↓
Graph Model (nodes, edges, metadata)
↓
GraphJSON Serialization
↓
Local HTTP Server (/api/graph + static assets)
↓
React Application (SVG graph + inspector)
NestLens uses the TypeScript Compiler API for static analysis. No regex parsing. No runtime execution. Your code stays on your machine.
nestlens/
├── apps/
│ └── web/ # React + SVG visualization
├── packages/
│ ├── cli/ # CLI entry point
│ ├── scanner/ # Project file discovery
│ ├── graph/ # Graph model + serialization
│ ├── analyzer/ # NestJS detectors
│ └── server/ # Local HTTP server
├── examples/
│ └── basic-project/ # Example NestJS project
├── docs/ # 18 documentation files
└── package.json
@Module())@Controller())@Injectable() or NestJS interface implementation)useClass, useFactory, useExisting)configure() methodAPP_* token providers (global interceptors, pipes, guards)pnpm install
pnpm lint
pnpm test
pnpm build
Run CLI during development:
npx tsx packages/cli/src/index.ts ./examples/basic-project
Develop web UI independently with hot reload:
# Terminal 1: start CLI server with graph data
pnpm nestlens ./examples/basic-project --no-browser
# Terminal 2: start Vite dev server with HMR
pnpm --filter web dev
Open http://localhost:5173. Vite proxies /api/graph to the CLI server on port 3000. Changes to apps/web/src/ are reflected instantly.
All documentation lives in docs/:
01_PRODUCT_VISION.md — Vision and mission02_MVP_SCOPE.md — Current MVP scope and implemented features03_ARCHITECTURE.md — System architecture and package boundaries04_IMPLEMENTATION_PLAN.md — Phase-by-phase implementation plan05_AGENT_RULES.md — Engineering rules for AI agents06_ANALYZER_SPECIFICATION.md — Detector specifications07_UI_GUIDELINES.md — UI design guidelines08_GRAPH_MODEL.md — Graph data model specification09_TASK_BREAKDOWN.md — Task-level breakdown10_DEV_GUIDE.md — Development guide11_PLUGIN_SYSTEM.md — Future plugin system design12_RELEASE_PROCESS.md — Release process13_README.md — Extended README14_CONTRIBUTING.md — Contributing guide15_CI_CD.md — CI/CD pipeline16_ROADMAP.md — Product roadmap17_SECURITY.md — Security policy18_CHANGELOG.md — ChangelogMIT
FAQs
Offline-first architecture explorer for NestJS applications
The npm package nestlens-cli receives a total of 2 weekly downloads. As such, nestlens-cli popularity was classified as not popular.
We found that nestlens-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.