Your Code Never Leaves
Your Machine
Privacy-first, local processing. No telemetry, no cloud backend — built for proprietary and compliance-bound codebases.
Local-First Analysis
Scanning, parsing, indexing, and search make no network calls. Your source code and embeddings never leave your machine — there is no Devscriptor backend.
- •FTS5 keyword and sqlite-vec search run locally
- •Embeddings computed on-device via bundled ONNX
- •No cloud dependencies, no code upload
- •Verify with: strace -e trace=network devscriptor scan
No Telemetry
No usage data is ever collected or transmitted. No analytics, no tracking, no phone-home — your usage patterns stay entirely private.
- •No telemetry collection
- •No analytics or usage statistics
- •Self-update is not compiled into official binaries
- •Official binaries never check the network for updates
One-Time Model Download
The embedding model downloads once on first embed (Hugging Face, with the Devscriptor mirror as a fallback), then runs fully offline. Pre-stage it for air-gapped machines.
- •Downloads ~150 MB once, then caches locally
- •Runs offline after the first fetch
- •Pre-populate the cache for zero network access
- •Suitable for HIPAA/SOX and air-gapped environments
Trusted SQLite Extensions
Only whitelisted extensions load. sqlite-vec (vec0), FTS5, and JSON1 come from trusted sources; names are strictly validated to prevent injection.
- •Whitelist of allowed built-in extensions
- •Strict name validation (^[a-zA-Z0-9_-]+$)
- •sqlite-vec loaded with RTLD_LOCAL
- •Extension verified loaded before use
Respects Your Secrets
Devscriptor honors .gitignore and excludes common sensitive files, and only accesses the directories you point it at.
- •Native .gitignore support (ignore crate)
- •Excludes SSH keys, .env, and credential files
- •Only reads project dirs and ~/.cache/devscriptor
- •LSP servers run as local stdin/stdout subprocesses
Memory-Safe Rust
Written in Rust for memory safety. The core logic contains no unsafe code; the few unsafe blocks (mmap parsing, extension FFI) are documented and reviewed.
- •Memory safety without garbage collection
- •No unsafe in core logic
- •Pinned dependencies in Cargo.lock
- •Regularly updated, well-established crates
Our Privacy Promise
Devscriptor is designed with privacy as the foundational principle. We believe your code is your intellectual property, and it should never be shared with third parties. That's why scanning, indexing, and search run entirely on your machine — with no telemetry, no analytics, and no cloud backend. The only optional network activity is the one-time model download and on-demand LSP installs, both of which can be pre-staged for fully air-gapped use.