Zorv — Autonomous AI CVE Patcher for Node.js & Python
Traditional Dependency Bots Break Your Builds. You Clean Up the Mess.Standard tools like Dependabot and Renovate are great at finding outdated packages, but they only do half the job. When they bump a major package version:1. The API changes, and your tests break.2. The PR sits in your backlog gathering dust.3. Your security team keeps flagging the unresolved CVE.Zorv fixes this by acting as an autonomous developer in your CI pipeline. When a package bump breaks your tests, Zorv analyzes the test failure, rewrites the obsolete API usage, verifies the tests pass, and opens a clean, merge-ready Pull Request.Key Features- 100% Self-Hosted CLI & Docker: Run it entirely in your local terminal or CI/CD pipelines (GitHub Actions, GitLab CI, etc.). Your source code stays completely private.- Bubblewrap Security Sandbox: LLM-generated code runs in a hardened Linux sandbox (`bwrap`). Zorv blocks network access for tests and protects your host environment.- Pluggable LLM System: Bring your own API keys. Supports 11+ providers out of the box (Azure OpenAI, OpenAI, Anthropic, Gemini, DeepSeek, Groq, etc.).- Node.js & Python Support: Works for both npm (package.json) and pip (requirements.txt / pyproject.toml) projects.- Compliance Ready: Appends SOC2-auditable JSON logs detailing every action.What You Get- Lifetime license key to run Zorv on unlimited repositories (no usage caps!).- Drop-in .github/workflows/zorv.yml workflow template.- Pre-built Docker image access (`docker pull zorv/cli:latest`).
Get it → youelfedr.gumroad.com