Install

Set up StableStack

Run this command from your project's root directory. StableStack detects your language, finds your source files, and scans automatically.

$ pip install stablestack

$ stablestack

Auto-detects your framework. Supports:

PythonJavaScriptTypeScriptC#VueGoRustRuby

What happens when you run it

Auto-detects your source files

Finds src/, app/, lib/, and other standard directories. Scans .py, .ts, .js, .cs, and more.

Runs 19 free checks instantly

Security, schema validation, session safety, code quality, C# / Unity, and more. No signup, no API key, no license required. Results appear in your terminal in seconds.

Shows findings with fix guidance

Every finding includes the offending code, a clear explanation of why it matters, and a concrete fix suggestion. Errors first, then warnings, then info.

Example output

Terminal

$ stablestack

src/api/config.py

  ✖ Line 12: Hardcoded API key found — never commit secrets to version control!

    Problem:
      api_key = "sk_live_abc123..."

    Fix:
      Use environment variables:
      api_key = os.environ.get('API_KEY')

    Why? Anyone who sees your code (including in git history) can see
    your secrets. Use environment variables or a secrets manager.

src/services/player.cs

  ✖ Line 45: GameObject.Find called inside Update() — this runs every
    frame and is a major performance cost.

    Fix:
      Cache the reference once in Awake() or Start().

────────────────────────────────────────────────────────────
Found 2 errors, 3 warnings in 12 files

Optional next steps

Wire up Claude Code

stablestack init

Installs /check and /fix-production slash commands. StableStack never writes to your repo without this explicit step.

Unlock all 132 checks

stablestack activate <key>

The free tier gives you 19 rules. A license unlocks determinism, async safety, type checking, performance, and 17 more categories. View pricing

Read-only

Never modifies your code

Runs locally

Code never leaves your machine

No account

No signup or API key needed

Opt-out telemetry

DO_NOT_TRACK=1 disables it

Need to set up manually? Read the docs or talk to us.