DEV Community

CopperSunDev profile picture

CopperSunDev

Engineering notes on AI code safety, static analysis, and what scanners can and can't catch.

Location Redwood City Joined Joined on  Personal website https://coppersun.dev/ github website
What Your Auditor Wants From Your AI Codebase

What Your Auditor Wants From Your AI Codebase

Comments
6 min read
Five FastAPI Security Patterns AI Coders Get Wrong

Five FastAPI Security Patterns AI Coders Get Wrong

Comments
6 min read
When AI Invents Libraries: Detecting Hallucinated Imports

When AI Invents Libraries: Detecting Hallucinated Imports

Comments
6 min read
The Secrets Your AI Assistant Might Leak (And How to Catch Them)

The Secrets Your AI Assistant Might Leak (And How to Catch Them)

Comments
7 min read
What Leaves Your Machine When an LLM Reviews Your Code

What Leaves Your Machine When an LLM Reviews Your Code

Comments
4 min read
The 2026 AI-Coding Market in Five Numbers

The 2026 AI-Coding Market in Five Numbers

Comments
4 min read
AI Code Review Policy for Copilot Teams

AI Code Review Policy for Copilot Teams

Comments
7 min read
Add BrassCoders to GitHub Actions

Add BrassCoders to GitHub Actions

Comments
5 min read
Snyk vs BrassCoders: Dependency Scanning vs Source Code Scanning

Snyk vs BrassCoders: Dependency Scanning vs Source Code Scanning

Comments
5 min read
BrassCoders Research Index Is Now Public on GitHub

BrassCoders Research Index Is Now Public on GitHub

Comments
3 min read
Scanning AI-Generated JavaScript and TypeScript

Scanning AI-Generated JavaScript and TypeScript

Comments
3 min read
The Six OSS Scanners BrassCoders Runs in One Pass

The Six OSS Scanners BrassCoders Runs in One Pass

Comments
3 min read
Catching Hallucinated Imports Before pip install

Catching Hallucinated Imports Before pip install

Comments
3 min read
We Scanned 15 AI-Written Python Files: What Stuck

We Scanned 15 AI-Written Python Files: What Stuck

Comments
3 min read
Package Hallucination: The Import Your AI Invented

Package Hallucination: The Import Your AI Invented

Comments
4 min read
Why an LLM Reviewer Isn't a Security Gate

Why an LLM Reviewer Isn't a Security Gate

Comments
3 min read
How Claude Code Reads a BrassCoders Findings File

How Claude Code Reads a BrassCoders Findings File

Comments
4 min read
Hardcoded Credentials in AI-Generated Python

Hardcoded Credentials in AI-Generated Python

Comments
3 min read
What a Findings File Does That a Chat Prompt Can't

What a Findings File Does That a Chat Prompt Can't

Comments
4 min read
The False Positive Is a Feature, Not a Bug

The False Positive Is a Feature, Not a Bug

Comments
4 min read
`shell=True` in AI Python: Command Injection

`shell=True` in AI Python: Command Injection

Comments
3 min read
Why Your AI Assistant Needs a Dumb Pre-Pass

Why Your AI Assistant Needs a Dumb Pre-Pass

Comments 1
4 min read
Why AI Code Needs a Deterministic Gate, Not Just an LLM

Why AI Code Needs a Deterministic Gate, Not Just an LLM

Comments
3 min read
What Gets You Cited by AI: The Numbers (2026)

What Gets You Cited by AI: The Numbers (2026)

Comments
5 min read
A Field Taxonomy of Bugs in AI-Generated Python

A Field Taxonomy of Bugs in AI-Generated Python

Comments
3 min read
You Feel 20% Faster. A Study Says 19% Slower.

You Feel 20% Faster. A Study Says 19% Slower.

Comments
2 min read
AI Shopping Agents Pick Products. Help Yours Win.

AI Shopping Agents Pick Products. Help Yours Win.

Comments
5 min read
Is AI-Generated Code Buggier? The 2025-26 Data

Is AI-Generated Code Buggier? The 2025-26 Data

Comments 1
3 min read
The Q1 2026 AI-Code CVE Reckoning

The Q1 2026 AI-Code CVE Reckoning

Comments
6 min read
Four Performance Bugs AI Coders Introduce Every Day

Four Performance Bugs AI Coders Introduce Every Day

Comments
4 min read
GEO: What the Research Says About AI Search

GEO: What the Research Says About AI Search

1
Comments 1
8 min read
We Benchmarked BrassCoders Against a Frontier Model

We Benchmarked BrassCoders Against a Frontier Model

Comments
5 min read
I built 90+ AI prompts because raw transcripts are useless

I built 90+ AI prompts because raw transcripts are useless

Comments 2
3 min read
I ended up building a transcription tool

I ended up building a transcription tool

Comments
2 min read
loading...