# foretop

> Lint beyond your code. Five CI-native scanners for the parts of a system your linter and your test suite never look at: model deprecations, telemetry coverage, MCP server capabilities, AI asset licences and subprocessor changes.

Each scanner is a standalone Apache-2.0 command that runs locally with no account, reads only the repository it is pointed at, and prints terminal, Markdown, JSON or SARIF output. Findings always carry evidence — a file and a line — and a collector that fails reports `unknown` rather than guessing that something is fine.

## Scanners

- [ebb](https://foretop.dev/ebb): LLM deprecation scanner — Model identifiers in your code against published provider retirement dates, attributed to CODEOWNERS. Run it with `uvx foretop-ebb scan .`.
- [telltale](https://foretop.dev/telltale): OpenAPI telemetry coverage — Your API contract against the logs, metrics, traces and alerts you actually emit — per route, per failure mode. Run it with `uvx foretop-telltale check .`.
- [charter](https://foretop.dev/charter): MCP capability drift scanner — What your agent can reach today against the manifest you committed yesterday. Run it with `uvx foretop-charter scan .`.
- [lading](https://foretop.dev/lading): AI asset licence checker — Obligations across code, model weights, datasets and adapters, resolved as one manifest. Run it with `uvx foretop-lading scan .`.

## Case studies

Every figure below comes from a recorded scan of a public repository, re-runnable from the commit each page names.

- [LangChain](https://foretop.dev/langchain): 1 model migration found in LangChain.
- [Langfuse](https://foretop.dev/langfuse): 117 API operations with no declared telemetry config found in Langfuse.
- [AutoGPT](https://foretop.dev/autogpt): 286 dependencies found in AutoGPT.
- [nuxt.com](https://foretop.dev/nuxt): 3 declared MCP servers found in nuxt.com.
- [the CZI data portal](https://foretop.dev/czi): 4 MCP servers with elevated access found in the CZI data portal.

## Optional

- undertow: Subprocessor change monitoring — Your vendors' disclosure pages against last week's, with region and effective date extracted. In development, no public package yet.
- [Hosted hub](https://app.foretop.dev): Shared history, policy, ownership and evidence when one repository becomes ten. Sign in with GitHub — no card, no sales call, no waitlist.
- [Crawler policy](https://foretop.dev/crawler): what the Foretop Undertow crawler fetches, how it identifies itself, and how to have it stop.
- [Source](https://github.com/foretop-dev): every scanner's repository.