Fortress System
Zero-dependency quality gate for JavaScript & TypeScript projects. One command to set up. One command to check your code.
$
npx fortress-system setup
Zero-dependency quality gate for JavaScript & TypeScript projects. One command to set up. One command to check your code.
Quality checks that work with your stack, not against it.
Built entirely on Node.js built-ins. Nothing in your supply chain to compromise. No dependency updates to chase.
npx fortress-system setup handles everything — package.json, git init, install, interactive wizard, pre-commit hook.
Only using 3 of 7 checks? Your score adapts. Disabled checks don't penalize you. A perfect 100 is always reachable.
19 built-in patterns catch AWS keys, GitHub tokens, Stripe secrets, JWTs, private keys, and more — before they hit version control.
Auto-configures CLAUDE.md, permissions, statusline, and two specialized AI agents for security audit and code review.
JSON output, exit codes, --ci flag. Drop fortress validate into any pipeline as a quality gate.
Each check is auto-detected and independently configurable.
| Check | What it does | Weight |
|---|---|---|
| TypeScript | Runs tsc --noEmit to catch type errors | 20 |
| Lint | Runs your linter (ESLint, Biome, Next.js) | 15 |
| Tests | Runs your test suite with proportional scoring | 25 |
| Content | Scans for TODOs, FIXMEs, forbidden patterns | 20 |
| Secrets | Detects hardcoded credentials (19 patterns) | 10 |
| Security | Runs npm audit for vulnerable dependencies | 10 |
| Build | Verifies your project builds successfully | 10 |
Run npx fortress-system setup in any JS/TS project. Fortress detects your framework, linter, test runner, and package manager automatically.
Run fortress quick as you work. The pre-commit hook catches issues before they reach your repo.
Run fortress deploy for a full quality gate. Score 95+ means deploy-ready. Track your trend with fortress trend.
Run fortress review to invoke security audit and code review agents via Claude Code. Optional but powerful.
Auto-detects and configures for your tools.
Next.js, React, Vue, Nuxt, Svelte, SvelteKit, Angular, Express, Fastify, Koa
Vitest, Jest, Mocha, Node.js built-in test runner
TypeScript, ESLint, Biome, npm, yarn, pnpm, bun
Takes 30 seconds to set up. Zero config required.
npx fortress-system setup