Evident
A developer-first repository intelligence CLI. It sits above tools like npm audit, Semgrep, Trivy and TruffleHog, normalizes and de-duplicates their findings, maps repository evidence to technical controls, and produces local reports.
- Year
- 2026
- Platform
- CLI
- Type
- Personal
- Status
- Shipped
What it does
- Detects frameworks, CI/CD, Docker and monorepo setups in Node.js and TypeScript repos
- Normalizes findings from several scanners into one model
- De-duplicates by fingerprint while keeping every source
- Terminal, JSON, HTML and SARIF 2.1.0 reports
- Fingerprint baselines for regression comparisons
- Severity thresholds enforced through exit codes