SlopStopper

Practices & Feedback

The categories of automated checks that keep your repo healthy

🔒 Security

  • SAST — Static application security testing flags vulnerabilities in source code before merge
  • DAST — Dynamic scanning probes a running site for common web vulnerabilities
  • Secrets Detection — Scans every commit for accidentally committed credentials or tokens
  • Dependency Scanning — Checks all dependencies for known CVEs on every pull request

🧹 Hygiene

  • Complexity Checks — Enforces complexity thresholds to keep functions readable and maintainable
  • Doc Structure — Validates that required documentation sections are present
  • Doc Accuracy — Ensures documentation reflects the actual state of the codebase
  • Doc Size — Prevents documentation from growing unwieldy or stale

✅ Reliability

  • E2E Tests — Playwright tests verify all pages and user flows work on every pull request
  • Smoke Tests — Lightweight smoke tests run against staging and production after every deploy

🚀 Deployment

  • Preview Deploys — Every pull request gets a unique preview URL on Netlify for review
  • Production Deploy — Merges to main trigger an automatic production release
  • Preview Cleanup — Stale preview environments are automatically removed after PRs close

Development Loops

SlopStopper organises quality feedback into two loops that keep velocity high and quality consistent.

Inner Loop — Local

The fast, local cycle a developer (or AI agent) runs before pushing. Completes in seconds to minutes.

✏️ Write Codewith AI
→
🔨 Build & Lintlocally
→
🧪 Run Testslocally
→
📤 Commit & Pushopen PR
↩ iterate on feedback

Outer Loop — CI/CD

Automated checks triggered on every push or PR. Deterministic feedback before code reaches production.

📤 Push / PR
→
🔒 SecuritySAST · DAST · Secrets · CVEs
→
🧹 HygieneComplexity · Docs
→
✅ ReliabilityE2E · Smoke Tests
→
🚀 DeployPreview URL
→
↩ fix & iterate