automated code review for bugs and security

Big-tech-backed code review agent with real npm adoption, but replicating its hybrid deterministic+LLM pipeline and ruleset solo is a heavy lift — fork/wrap beats rebuild.