Reference
Supported languages
Faundr works with any project. Each of its parts (code map, quality, security, tests…) has a different level of support in each language. This page shows, language by language, what Faundr does on its own and what's left for your AI agent to review by reading the code.
How to read the table
- Full: Faundr analyzes it on its own, without using tokens, every time the check runs.
- Partial: Faundr analyzes part of it. Open "What's missing" right below the table to see which part.
- AI agent only: the automatic check doesn't cover this language yet. Your agent reviews it by reading the code when you ask (for example,
/faundr:quality --fullor/faundr:security). - Not yet: this part doesn't work in this language yet.
- N/A: it doesn't make sense for this language (for example, design checks on a Go server).
| Language | Map | Quality | Security | Libraries | Secrets | Errors | Live app | Tests | Design | Stack |
|---|---|---|---|---|---|---|---|---|---|---|
| JavaScript & TypeScriptNode, React, Next.js, TanStack | ||||||||||
| React NativeExpo | ||||||||||
| VueNuxt | ||||||||||
| Angular | ||||||||||
| Svelte & Astro | ||||||||||
| PythonDjango, Flask, FastAPI | ||||||||||
| Flutter & Dart | ||||||||||
| PHPLaravel | ||||||||||
| Go | ||||||||||
| JavaSpring | ||||||||||
| KotlinAndroid | ||||||||||
| C#.NET | ||||||||||
| RustAxum, Actix Web | ||||||||||
| C | ||||||||||
| C++ | ||||||||||
| Docker | ||||||||||
| HTML | ||||||||||
| CSSSass, Less | ||||||||||
| Tailwind |
What’s missing (4)
- Kotlin · Design: your AI agent audits it by reading the screens (/faundr:design)
- C · Libraries with known vulnerabilities: only with Conan (conan.lock); vcpkg has no public database of known vulnerabilities
- C++ · Libraries with known vulnerabilities: only with Conan (conan.lock); vcpkg has no public database of known vulnerabilities
- Docker · Libraries with known vulnerabilities: base images have no public database of known vulnerabilities (OSV); Quality flags images without a pinned version
In your project
Inside each project, the Stack → What Faundr covers tab shows the same table with only that project's languages. It comes from the automatic Stack scan, so it updates itself when the project picks up a new language.
When part of the project isn't covered by the automatic check, the Quality, Security, Tests, Design and Errors panels show the notice Part of this project isn't covered by automatic checks. That way "no issues" never hides a part nobody looked at.
What works in every language
- Exposed passwords and keys: the scan looks through every text file in the project and the git history.
- Libraries with known vulnerabilities: Faundr reads the dependency lists for npm, Python, Rust (
Cargo.lock), Go (go.mod), PHP (composer.lock), Flutter (pubspec.lock), Ruby (Gemfile.lock), .NET (packages.lock.jsonor.csproj), Java and Kotlin (pom.xml, Gradle) and C/C++ with Conan, and checks each library against the public vulnerability database. The dashboard checks again every day, even with no session open. - Command errors: when the agent runs the build, tests or lint (
go test,cargo build,flutter test,./gradlew test,dotnet build,phpunit,make,docker build…), each error becomes an item in the dashboard with its file and line, and it closes on its own when the same command passes.
Nothing to install
Faundr's non-AI checks are its own and ship with the plugin, for every language. It doesn't add outside tools to your project. If your project already uses a linter or type checker (like ruff, mypy, clippy, golangci-lint, PHPStan or dart analyze), the errors they report when the agent runs them land in Errors, just like any other command's. Tests run with the runner your project already has. If coverage or mutation testing needs an extra tool, Faundr shows you the install command and never installs it on its own.