DEV Community: Vinayak Rao The latest articles on DEV Community by Vinayak Rao (@t4tarzan). https://dev.to/t4tarzan https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3950060%2F5aa83f43-a447-4ed1-aaf3-4a81194357fe.jpg DEV Community: Vinayak Rao https://dev.to/t4tarzan en TestForge: 21-Dimension AI Testing — From Zero to Enterprise-Ready in 1 Week Vinayak Rao Mon, 25 May 2026 08:57:42 +0000 https://dev.to/t4tarzan/testforge-21-dimension-ai-testing-from-zero-to-enterprise-ready-in-1-week-324i https://dev.to/t4tarzan/testforge-21-dimension-ai-testing-from-zero-to-enterprise-ready-in-1-week-324i <h2> The Journey </h2> <p>I spent the last week building TestForge — a testing platform that analyzes code across <strong>21 dimensions</strong>. Not 3 like Snyk. Not 5 like SonarQube. Twenty-one.</p> <p>Here is everything that was built, tested, and deployed to production.</p> <h2> What TestForge Analyzes </h2> <h3> Standard Dimensions </h3> <ul> <li> <strong>Security scanning</strong> — SAST with OWASP Top 10 coverage mapping</li> <li> <strong>Unit test analysis</strong> — Coverage estimation, framework detection</li> <li> <strong>Load &amp; performance</strong> — Rate limiting, caching, connection pooling</li> <li> <strong>Accessibility</strong> — WCAG compliance, alt text, form labels</li> <li> <strong>Contract testing</strong> — OpenAPI/Swagger detection, API versioning</li> <li> <strong>Visual regression</strong> — Style consistency</li> </ul> <h3> Strategic (Only TestForge Has These) </h3> <ul> <li> <strong>🤖 Agentic Scale Prediction</strong> — World first. Simulates thousands of AI agents hitting your API. Predicts failure patterns, bottlenecks at scale.</li> <li> <strong>📊 DORA Metrics</strong> — Deployment frequency, lead time, MTTR, change failure rate</li> <li> <strong>🎯 Vision &amp; Goal Alignment</strong> — Observability, feature flags, analytics, CI/CD maturity</li> <li> <strong>📦 Scope Coverage</strong> — Documented vs implemented features</li> <li> <strong>🏗️ Stack Analysis</strong> — Architecture quality, TypeScript, ORM, caching</li> </ul> <h3> Deep Analysis </h3> <ul> <li> <strong>N+1 Query Detection</strong> — DB queries inside loops</li> <li> <strong>Supply Chain Audit</strong> — CVE database cross-reference</li> <li> <strong>Dead Code Detection</strong> — Unused dependencies</li> <li> <strong>License Compliance</strong> — GPL/copyleft risk flagging</li> <li><strong>Edge Cases + Property-Based + Chaos + Mutation + Predictive</strong></li> </ul> <h2> Real Test Results (tinyhttp/malibu) </h2> <div class="highlight js-code-highlight"> <pre class="highlight plaintext"><code>Security 4 findings ████░░░░░░░░░░░░░░░░ Unit Tests 67% █████████████░░░░░░░ Agentic Scale 24/100 ████░░░░░░░░░░░░░░░░ ⚠️ Critical DORA 30/100 ██████░░░░░░░░░░░░░░ ⚠️ Manual deploys OWASP Coverage 20% ████░░░░░░░░░░░░░░░░ </code></pre> </div> <p><strong>Top findings:</strong> Auth gaps, no rate limiting, no observability, 34 undocumented endpoints.</p> <h2> Tech Stack </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Layer</th> <th>Technology</th> </tr> </thead> <tbody> <tr> <td>Frontend</td> <td>React 19 + TypeScript + Vite + Tailwind</td> </tr> <tr> <td>Backend API</td> <td>Vercel Serverless (18 endpoints)</td> </tr> <tr> <td>MCP Server</td> <td>Fastify + TypeScript on Fly.io</td> </tr> <tr> <td>Database</td> <td>Neon PostgreSQL + Drizzle ORM (8 tables)</td> </tr> <tr> <td>Payments</td> <td>Stripe Checkout + Webhooks</td> </tr> <tr> <td>Auth</td> <td>GitHub OAuth</td> </tr> <tr> <td>npm</td> <td>@whitenoisenpm/testforge-mcp v0.2.3</td> </tr> </tbody> </table></div> <h2> Enterprise Features </h2> <ul> <li> <strong>Data Isolation</strong>: Per-user repos, tests, API keys (7 tasks)</li> <li> <strong>Security</strong>: Rate limiting, API key auth, CORS, security headers (6 tasks)</li> <li> <strong>Dashboard</strong>: Overview, repos, test history, API keys, billing, team (12 tabs)</li> <li> <strong>Reliability</strong>: Auto-scaling, health checks, DB backups (6 tasks)</li> <li> <strong>UX</strong>: Onboarding modal, empty states, error boundaries, toasts (6 tasks)</li> </ul> <h2> Try It </h2> <div class="highlight js-code-highlight"> <pre class="highlight shell"><code><span class="c"># Web Platform</span> open https://testforge.run <span class="c"># MCP IDE Integration</span> npx @whitenoisenpm/testforge-mcp <span class="nb">install</span> <span class="c"># CLI Score (CI/CD friendly)</span> npx @whitenoisenpm/testforge-mcp score https://github.com/user/repo <span class="c"># Self-Hosted</span> git clone https://github.com/t4tarzan/testforge <span class="nb">cd </span>testforge/mcp-server <span class="o">&amp;&amp;</span> flyctl launch <span class="nt">--now</span> </code></pre> </div> <h2> Pricing </h2> <div class="table-wrapper-paragraph"><table> <thead> <tr> <th>Plan</th> <th>Price</th> <th>Tests</th> </tr> </thead> <tbody> <tr> <td>Free</td> <td>$0</td> <td>5/mo</td> </tr> <tr> <td>Pro</td> <td>$29/mo</td> <td>100/mo</td> </tr> <tr> <td>Enterprise</td> <td>$199/mo</td> <td>Unlimited</td> </tr> </tbody> </table></div> <p><strong>Website</strong>: <a href="https://testforge.run" rel="noopener noreferrer">testforge.run</a> | <strong>GitHub</strong>: <a href="https://github.com/t4tarzan/testforge" rel="noopener noreferrer">t4tarzan/testforge</a></p> <p>Built by <a href="https://github.com/t4tarzan" rel="noopener noreferrer">t4tarzan</a> — Ship code you trust. 🚀</p> testing devops webdev opensource I Built a Testing Tool That Analyzes Code Across 21 Dimensions — Here is Why Vinayak Rao Mon, 25 May 2026 06:31:02 +0000 https://dev.to/t4tarzan/i-built-a-testing-tool-that-analyzes-code-across-21-dimensions-here-is-why-4654 https://dev.to/t4tarzan/i-built-a-testing-tool-that-analyzes-code-across-21-dimensions-here-is-why-4654 <h2> The Problem </h2> <p>I was shipping AI-generated code fast. Really fast. But here is the thing — <strong>nobody was testing it properly</strong>.</p> <p>Sure, I had ESLint. I had Jest for unit tests. But when I looked at the testing landscape, I realized something:</p> <ul> <li> <strong>Snyk</strong> checks security vulnerabilities (1 dimension)</li> <li> <strong>SonarQube</strong> checks code quality (2-3 dimensions)</li> <li> <strong>TestRail</strong> manages test cases (manual, 1 dimension)</li> </ul> <p>Nobody checks if your API can handle <strong>thousands of AI agents</strong> hitting it simultaneously. Nobody checks your <strong>DORA metrics</strong>. Nobody does <strong>supply chain audits</strong>, <strong>N+1 query detection</strong>, or <strong>agentic scale prediction</strong>.</p> <p>So I built <strong>TestForge</strong> — a testing platform that analyzes code across <strong>21 dimensions</strong>.</p> <h2> What Makes It Different </h2> <h3> Standard Dimensions </h3> <ul> <li>Security scanning (SAST)</li> <li>Unit test coverage</li> <li>Load &amp; performance</li> <li>Accessibility (WCAG)</li> </ul> <h3> Strategic Dimensions (Only TestForge) </h3> <p><strong>🤖 Agentic Scale Prediction</strong> — World first. Simulates thousands of AI agents hitting your API. Predicts failure patterns, bottlenecks, and cascading failures.</p> <p><strong>📊 DORA Metrics</strong> — Deployment frequency, lead time, MTTR, change failure rate.</p> <p><strong>🔗 Supply Chain Audit</strong> — Cross-references deps against CVE databases with fix versions.</p> <p><strong>🔍 N+1 Query Detection</strong> — Finds DB queries inside loops that ORMs hide from you.</p> <p><strong>👁️ Vision &amp; Goal Alignment</strong> — Observability, feature flags, analytics, CI/CD maturity.</p> <p><strong>📦 Dead Code + License</strong> — Unused deps, dead exports, GPL/copyleft risks.</p> <h2> How It Works </h2> <ol> <li>Go to <a href="https://testforge.run" rel="noopener noreferrer">testforge.run</a> </li> <li>Paste any public GitHub repo URL</li> <li>Get a full 21-dimension report in ~30 seconds</li> </ol> <p>No config. No setup. No YAML files.</p> <h2> Results from testing tinyhttp/malibu </h2> <div class="highlight js-code-highlight"> <pre class="highlight plaintext"><code>Security 4 findings ████░░░░░░░░░░░░░░░░ Unit Tests 67% █████████████░░░░░░░ Agentic Scale 24/100 ████░░░░░░░░░░░░░░░░ ⚠️ DORA 30/100 ██████░░░░░░░░░░░░░░ ⚠️ OWASP Coverage 20% ████░░░░░░░░░░░░░░░░ ⚠️ </code></pre> </div> <ul> <li>3 auth middleware gaps (HIGH)</li> <li>No rate limiting — critical for agentic workloads</li> <li>No observability or product analytics</li> <li>34 undocumented API endpoints</li> </ul> <h2> Try It </h2> <div class="highlight js-code-highlight"> <pre class="highlight shell"><code><span class="c"># Web platform</span> open https://testforge.run <span class="c"># MCP IDE integration</span> npx @whitenoisenpm/testforge-mcp <span class="nb">install</span> <span class="c"># Self-hosted (5 min)</span> git clone https://github.com/t4tarzan/testforge <span class="nb">cd </span>testforge/mcp-server <span class="o">&amp;&amp;</span> flyctl launch <span class="nt">--now</span> </code></pre> </div> <p><strong>Try it</strong>: <a href="https://testforge.run" rel="noopener noreferrer">testforge.run</a><br> <strong>GitHub</strong>: <a href="https://github.com/t4tarzan/testforge" rel="noopener noreferrer">t4tarzan/testforge</a><br> <strong>npm</strong>: <code>npx @whitenoisenpm/testforge-mcp install</code></p> <p>Built by <a href="https://github.com/t4tarzan" rel="noopener noreferrer">t4tarzan</a></p> testing devops webdev opensource