|
|
|
|
|
by ThailandJohn
291 days ago
|
|
@quibono: Great questions! The "don't create venv" warning is because TheAuditor creates its own sandboxed
environment (.auditor_venv/) for analyzing YOUR project. If you install TheAuditor inside your project's venv,
you get nested virtualenvs which breaks the sandbox isolation. TheAuditor should be installed globally (or in
~/tools/), then it creates isolated environments for each project it analyzes. The ESLint/Ruff/MyPy integration isn't about putting an LLM between you and linters. It's about aggregation
and correlation. Example:
- Ruff says "unused import"
- MyPy says "type mismatch"
- TheAuditor correlates: "You removed the import but forgot to update 3 type hints that depended on it" The LLM reads the aggregated report to understand the full picture across all tools, not just individual
warnings. @ffsm8: You're absolutely right - I can't code and the dependency tree is probably a mess! That's exactly WHY
I built this. When you're using AI to write code and can't verify if it's correct, you need something that
reports the ground truth. The irony isn't lost on me: I used Claude to build a tool that audits code written by Claude. It's enablement
all the way down! But that's also the proof it works - if someone who can't code can use AI + TheAuditor to
build TheAuditor itself, the development loop is validated. The architectural decisions might be weird, but they're born from necessity, not incompetence. Happy to
explain any specific weirdness! |
|