{
  "slug": "codacy",
  "name": "Codacy",
  "url": "https://www.codacy.com",
  "cat": "review",
  "group": "ship",
  "tagline": "Quality and security platform",
  "price": "Developer IDE plugin free forever; free forever for open source projects; Team $18/dev/mo billed annually or $21 monthly, up to 30 devs; Business custom",
  "tier": "mixed",
  "pick": false,
  "what": "Combines static analysis across 49 languages with SAST, hardcoded-secret detection, dependency SCA, malicious-package checks and IaC scanning, plus test coverage tracking with merge gates. It runs as a hosted service over repository webhooks, so it needs no CI pipeline changes, and ships plugins for VS Code, JetBrains and Cursor.",
  "why": "The coverage merge gate is the useful lever: it blocks a pull request when AI-written code arrives with no tests attached, which is the default state of nearly every vibe-coded feature.",
  "warn": "Enabling all default rule sets at once produces a huge first-run backlog of findings. Configure the rule set before inviting the rest of the team.",
  "category": {
    "key": "review",
    "name": "Code review, testing & security",
    "desc": "The single biggest risk in vibe coding is shipping AI code nobody read. This is the fix.",
    "group": "ship",
    "groupName": "Ship it & keep it alive"
  },
  "freshness": null,
  "health": {
    "ok": true,
    "status_code": 200,
    "final_url": "https://www.codacy.com/",
    "checked_at": "2026-08-19T00:17:14.278+00:00"
  },
  "corrected_at": null,
  "upstream_changed_at": null
}