AI writes more and more of our code, and code review can't keep up. So I built BuildProof: a tool that looks at a code change and tries to prove a bug, not just guess one.
BugsJS is a public dataset of real bugs from real projects (Express, ESLint, Hexo, Karma, Shields, Bower, hessian.js). I re-introduced each bug and let the hunter look at the change, with no hints.
It also knows when to stay quiet: I ran it on 4 open pull requests in lodash, koa and axios. It found nothing, and it was right not to. It doesn't invent bugs to look busy.
Your code runs in a locked container with no network and is deleted when the check ends. There's also a free mode that uses your own local model (Ollama).
30-second demo, no project needed:
npx buildproof try
On your own git project (3 free cloud checks):
npx buildproof hunt --base main --cloud
I'd really like feedback, especially on the misses. Which kinds of bugs should it catch that it doesn't?