CodeGuardian is a developer-friendly plugin designed to supercharge project scaffolding within Bolt.new. It adds automated security checks, performance optimizations, and real-time feedback—right at the start of your coding journey. Whether you're a beginner trying to avoid common pitfalls or a seasoned coder focused on best practices, CodeGuardian helps you ship with confidence.


✨ Inspiration

This project was born at the Vibe Coders Hackathon, where the goal wasn't just to build a vibey app—but something for Vibe Coders. We wanted to create a tool that enhances the process of building apps, not just the end product. Inspired by how many early-stage coders skip over security and performance practices, we set out to make those best practices automatic and accessible.


🛠️ How We Built It

  • Framework: We hooked into Bolt.new’s initialization flow using its CLI scaffolding features.
  • Security Layer: Integrated static analysis tools (like ESLint, Bandit, and custom regex scripts) to flag vulnerabilities at project start.
  • Performance Advisor: Built a lightweight analysis engine that runs after each file creation, suggesting improvements based on common bottlenecks.
  • Live Feedback: CLI and IDE-integrated notifications provide real-time suggestions, docs, and refactoring tips.

📚 What We Learned

  • Bolt.new's architecture is modular enough to support plugin injection with minimal friction.
  • Most developers don’t skip best practices because they don’t care—but because it’s not baked into their workflow.
  • Real-time suggestions need to be helpful, not noisy—so we had to strike the right balance between guidance and annoyance.

🧗 Challenges Faced

  • Integration Complexity: Bolt.new has limited documentation for custom plugin development, so reverse engineering some flows took time.
  • False Positives: Our early security scans were too sensitive—flagging valid code as risky. We refined the rules based on community input.
  • Developer Experience: Creating a tool that’s helpful but not disruptive required lots of trial and error.

🌈 Final Thoughts

CodeGuardian isn’t just a plugin—it’s a code conscience. By embedding good habits at the beginning, we help Vibe Coders and others build with confidence, creativity, and clarity.

Built With

Share this project:

Updates