marshalhq

Six weeks in building a behavioral supply chain scanner for Maven dependencies. Shipped v0.1.0 yesterday. The hardest part is not the code, it is finding time to talk to potential users. https://dev.to/usman18/i-scanned-real-maven-central-packages...

I ran mutation testing on a side project recently and found a test that passed even if the production method returned an empty string. AI-generated tests at scale will have exactly this problem. High coverage, confident test names, zero actual verification.