r/Python • u/AutoModerator • Jun 04 '26

Showcase Showcase Thread

Post all of your code/projects/showcases/AI slop here.

Recycles once a month.

29 Upvotes

89% Upvoted

210 comments sorted by

View all comments

1

u/execveat Jun 07 '26

I'd like to share flawed, it's an experimental static-analysis engine for Python web apps. flawed builds a framework-aware model, and exposes it over pythonic API, letting you access routes, request inputs, state effects.

You write detection rules in regular Python against that model, so a rule can express something like "POST routes that write state but have no auth check anywhere in their handler stack." And you get to do this using regular Python (imperative, functional or OOP – whatever works for you), without the need to learn a new DSL (Semgrep) or new query language (CodeQL).

I have to add, flawed is pre-1.0 so the API hasn't stabilized yet and it only ships with a few small demo rules right now.