nimbus-guardian

v1.1.0

Stop shipping broken code. AI-powered deployment safety net that catches secrets, missing tools, and rookie mistakes before they hit production. For more information about how to use this package see README

Latest version published 2 months ago

License: UNLICENSED

NPM

GitHub

Package Health Score

65 / 100

security
No known security issues
popularity
Limited
maintenance
Healthy
community
Limited

Explore Similar Packages

Security

No known security issues

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

All Versions

Version				Vulnerabilities	License Risk
1.0.1	\|	09/2025		0 C 0 H 0 M 0 L	0 H 0 M 0 L
1.1.0	\|	09/2025	Popular	0 C 0 H 0 M 0 L	0 H 0 M 0 L

License

UNLICENSED

Security Policy

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Limited

Weekly Downloads (2)

GitHub Stars: 1
Forks: 0
Contributors: -

Direct Usage Popularity

The npm package nimbus-guardian receives a total of 2 downloads a week. As such, we scored nimbus-guardian popularity level to be Limited.

Based on project statistics from the GitHub repository for the npm package nimbus-guardian, we found that it has been starred 1 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Limited

Readme.md: Yes
Contributing.md: No
Code of Conduct: No
Contributors: 0
Funding: No

This project has seen only 10 or less contributors.

We found a way for you to contribute to the project! Looks like nimbus-guardian is missing a Code of Conduct.

Embed Package Health Score Badge

Maintenance

Healthy

Commit Frequency

Open Issues: 0
Open PR: 92
Last Release: 2 months ago
Last Commit: 2 months ago

Further analysis of the maintenance status of nimbus-guardian based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Healthy.

We found that nimbus-guardian demonstrates a positive version release cadence with at least one new version released in the past 3 months.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: not defined

Age: 2 months
Dependencies: 12 Direct
Versions: 4
Install Size: 177 kB
Dist-tags: 1
# of Files: 19
Maintainers: 1
TS Typings: No

nimbus-guardian has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Readme

Nimbus Guardian

AI-Powered Cloud Deployment Safety for Everyone

Never deploy broken code again. Your personal AI mentor for cloud deployment, security, and best practices.

What is Nimbus Guardian?

Nimbus Guardian is like having a senior developer watching over your shoulder, catching mistakes before they become problems. It uses Claude (Anthropic) and Gemini (Google AI) to explain issues in plain English and teach you as you code.

Perfect for:

New developers - Learn deployment the right way
Solo developers - Catch issues before production
Teams - Enforce best practices automatically
Learners - Get instant explanations of concepts

Features

Smart Scanning

Security: Catches exposed API keys, secrets, and vulnerabilities
Configuration: Validates .env, .gitignore, and deployment configs
Dependencies: Finds vulnerabilities and outdated packages
Performance: Suggests optimizations and caching strategies
Docker: Validates container security and best practices
Firebase: Checks security rules and configuration

AI-Powered Assistance

Natural Language: Ask questions in plain English
Context-Aware: Understands your project and experience level
Explanations: Learn WHY something is wrong, not just WHAT
Code Review: Get AI feedback on your code
Debugging Help: Understand and fix errors faster

Auto-Fix

Missing .gitignore patterns
Exposed .env files
Security vulnerabilities
Missing environment examples
Common configuration issues

Interactive Learning

Built-in tutorials for beginners
Concept explanations at your level
Best practices guidance
Real-time mentorship

Quick Start

Install

npm install -g nimbus-guardian

Setup

nimbus setup

Answer a few questions:

What's your project name?
Are you new to coding? (We adjust our help!)
Which cloud platform? (Firebase, AWS, etc.)
API keys for AI assistants (optional)

Scan Your Project

nimbus scan

Get instant feedback on:

Security issues
Configuration problems
Missing best practices
Deployment readiness

Fix Issues Automatically

nimbus fix

Let the AI fix common issues automatically.

Get Help Anytime

nimbus chat

Chat with your AI assistant:

"What does this error mean?"
"How do I deploy to Firebase?"
"Is my code secure?"
"Explain environment variables"

Commands

Essential Commands

nimbus setup          # Interactive setup wizard
nimbus scan           # Scan project for issues
nimbus fix            # Auto-fix common issues
nimbus chat           # Chat with AI assistant
nimbus dashboard      # Launch web dashboard
nimbus install-hooks  # Add pre-commit hooks

Advanced Commands

nimbus scan --quick             # Quick scan (essential checks only)
nimbus scan --ai                # Include AI explanations
nimbus scan --fail-on critical  # Exit code for CI/CD
nimbus scan --json              # Machine-readable output
nimbus explain           # Learn about any concept
nimbus debug ""          # Get help with errors

Web Dashboard

Launch the interactive dashboard:

nimbus dashboard

Opens at https://localhost:3333 with:

Real-time project scanning
Security metrics
Issue tracking
AI-powered insights

Getting API Keys

Claude (Anthropic)

Visit: https://console.anthropic.com/
Sign up or log in
Create API key
Add to Nimbus: nimbus setup

Best for: Detailed explanations, complex debugging

Gemini (Google AI)

Visit: https://makersuite.google.com/app/apikey
Sign in with Google
Click "Create API Key"
Add to Nimbus: nimbus setup

Best for: Quick answers, code generation

Cost: Both have generous free tiers.

What Nimbus Catches

Security Issues (CRITICAL)

API keys in code
.env files in git
Missing .gitignore patterns
Hardcoded passwords
Security vulnerabilities
Exposed secrets

Platform Validation (HIGH)

Docker: Root user detection, hardcoded secrets, :latest tags, multi-stage builds
Firebase: Security rules, open database access, configuration validation
Missing environment files
No .env.example
Missing security headers

Best Practices (MEDIUM)

Missing compression
No caching strategy
Outdated dependencies
Performance optimizations

Real-World Example

$ nimbus scan --ai

Starting comprehensive analysis...

Scan Results
Critical: 1
High: 2
Medium: 3

Issues Found:

[CRITICAL] .env file is tracked in git (exposes secrets!)
   File: .env
   Auto-fixable: Yes

   AI Explanation:
   When you commit .env to git, anyone with access to your repository
   can see your secret keys and passwords. This is extremely dangerous
   because attackers could use these to access your databases, APIs,
   and user data. Always keep .env in .gitignore!

[HIGH] Dockerfile doesn't specify USER (runs as root by default)
   Auto-fixable: Yes

   AI Explanation:
   Running containers as root is a security risk. If an attacker
   compromises your container, they have full system access. Always
   create a non-root user in your Dockerfile.

$ nimbus fix

Found 2 fixable issues
? Fix these issues? Yes

✓ Removed .env from git
✓ Added USER directive to Dockerfile

All fixes applied!

For Complete Beginners

Don't worry if terms like "environment variables" or "API keys" sound confusing. Nimbus explains everything in plain English.

First time? Just run:

nimbus setup
nimbus learn

Choose "Git & Version Control Basics" and start learning by doing.

Stuck? Ask for help:

nimbus chat

Type your question in normal English. No technical jargon required.

How It Works

Scans your project files for common issues
Analyzes Docker, Firebase, dependencies, security patterns
Explains using AI (Claude or Gemini) at your experience level
Fixes automatically when safe
Teaches you how to prevent issues next time

Privacy: Your code is only sent to AI when you explicitly use --ai flag or chat command. Regular scans run 100% locally.

Project Structure

nimbus-guardian/
├── cli.js                      # Main CLI interface
├── guardian-engine.js          # Core scanning engine
├── validators/                 # Platform validators
│   ├── docker-validator.js    # Docker security scanning
│   └── firebase-validator.js  # Firebase validation
├── ai-assistant.js             # Claude &amp; Gemini integration
├── dashboard-server.js         # Web dashboard backend
├── public/                     # Dashboard frontend
├── setup.js                    # Interactive setup wizard
├── package.json                # Dependencies
└── README.md                  # This file

CI/CD Integration

GitHub Actions

name: Security Scan
on: [push, pull_request]

jobs:
  nimbus-scan:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v3
      - name: Install Nimbus
        run: npm install -g nimbus-guardian
      - name: Run Security Scan
        run: nimbus scan --fail-on critical

Pre-commit Hook (Automatic)

# Install git hooks
nimbus install-hooks

# Now every commit will be scanned automatically

Manual hook:

#!/bin/bash
nimbus scan --quick || exit 1

Experience Levels

Nimbus adapts to your experience:

Beginner

Simple, jargon-free explanations
Step-by-step instructions
Lots of encouragement
"Why" explanations for everything

Intermediate

Best practices focus
Multiple solution approaches
Industry standards
Practical examples

Advanced

Architecture insights
Performance deep-dives
Enterprise considerations
Cutting-edge techniques

Change anytime: nimbus setup

Troubleshooting

"No AI provider configured"

Run nimbus setup and add your API keys.

"Invalid API key"

Check your keys in .nimbus/.env or run nimbus setup again.

"Command not found: nimbus"

npm install -g nimbus-guardian

Still stuck?

nimbus chat

Ask: "I'm having trouble with [your issue]"

Pro Tips

Auto-scan commits: nimbus install-hooks
Quick checks: nimbus scan --quick (< 5 seconds)
CI/CD integration: Use --fail-on critical for exit codes
Dashboard mode: nimbus dashboard for visual interface
Learning? Use nimbus explain and nimbus learn liberally

What's Next?

After setup, try this workflow:

# 1. Check your project health
nimbus scan --ai

# 2. Fix issues automatically
nimbus fix

# 3. Learn about any confusing issues
nimbus explain "environment variables"

# 4. Install pre-commit hooks
nimbus install-hooks

# 5. Launch web dashboard
nimbus dashboard

Licensing

This is proprietary software. Personal, non-commercial use is permitted for evaluation purposes only.

For commercial use, enterprise licensing, or custom deployments, contact:

Paul Phillips Chairman, Clear Seas Solutions LLC Email: chairman@parserator.com Website: https://parserator.com

See LICENSE.md for full terms.

Current Status

Version: 1.0.0

Fully Tested Features

Security scanning (API keys, secrets, .env exposure)
Docker validation (5 security checks)
Firebase validation (security rules, config)
Dependency vulnerability scanning
AI assistance (Claude + Gemini)
Auto-fix capabilities
CLI with all commands
Web dashboard backend
Pre-commit hooks
CI/CD integration

Upcoming Features

Dashboard frontend integration
AWS validator
GCP validator
Documentation site
Video tutorials

See WIP-STATUS.md for detailed progress tracking.

A Paul Phillips Manifestation

Making cloud deployment safe and accessible for everyone, one commit at a time.

Ready to deploy with confidence?

npm install -g nimbus-guardian
nimbus setup

nimbus-guardian dependencies

@anthropic-ai/sdk @google/generative-ai chalk commander inquirer ora boxen prompts conf dotenv node-fetch fs-extra

nimbus-guardian development dependencies

@types/node

FAQs

What is nimbus-guardian?

Stop shipping broken code. AI-powered deployment safety net that catches secrets, missing tools, and rookie mistakes be... Visit Snyk Advisor to see a full health score report for nimbus-guardian, including popularity, security, maintenance & community analysis.

Is nimbus-guardian popular?

The npm package nimbus-guardian receives a total of 2 weekly downloads. As such, nimbus-guardian popularity was classified as limited. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is nimbus-guardian well maintained?

We found that nimbus-guardian demonstrated a healthy version release cadence and project activity. It has a community of 0 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is nimbus-guardian safe to use?

The npm package nimbus-guardian was scanned for known vulnerabilities and missing license, and no issues were found. Thus the package was deemed as safe to use. See the full health analysis review.

Last updated on 6 December-2025, at 19:40 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP