Codacy Platform

Codacy Now Detects Malicious Packages like Shai-Hulud 2.0
In recent weeks, we’ve witnessed a wave of sophisticated supply chain attacks where npm packages were compromised, most notably the Shai-Hulud 2.0...
Codacy's New AI Risk Hub and AI Reviewer Bring Order to the Wild West of AI Code Compliance
The widespread adoption of AI coding tools is starting to feel like a 'Wild West' for devs, engineering leaders and compliance officers alike. With ...
Benchmark The Risk Profile of Your AI Coding Posture
Developers have fully embraced AI coding tools, and they are not planning to let go. They ship more, debug faster, and automate the tedious parts of...
Cut Through the Noise: Introducing Smart False Positive Triage
Every developer has been there: You push your code, the scanner runs, and your PR checks light up with new alerts. You instinctively know you are not...
Codacy Integrates OSSF Scorecard for True Supply Chain Confidence
In modern software development, we run on open-source. It’s the engine of innovation, allowing teams to build faster, smarter, and more efficiently....
Why (and how) we migrated from Create React App to Vite
We migrated our SPA from Create React App to Vite and Jest to Vitest to escape security vulnerabilities, dependency constraints, and slow builds

Subscribe
to our blog

Stay updated with our monthly newsletter.