What I like most is that it's easy to use, the set-up wasn't too complex. It's intuitive and it has a lot of features. We use it both to identify vulnerabilities and for code quality, it's impressive for how many things it can scan the code for. For example, it found outdated packages with vulnerabilities and configurations with potential security risks. It also provides links with more information for each finding and ways to fix them.

There were a few cases where for some vulnerabilities it found a few places where they occurred, but didn't find all the places, so you have to be careful and check all the code.

Although getting pseude code for all low code diagrams from our Mendix app made me a bit skeptical in the beginning, I started to appreciate the overall features Sigrid provides and the ability to review both Open Source and Mendix low code apps. As I outlined in the cons, there should be more credit/focus in Mendix Low Code developed apps when as little Java as possible is used, benefitting fully from Low Code assesments. I personally don't appreciate when Java is seen as the way to go in Low Code software development.

We use Sigrid for the following objectives (in order of top prio first): - Monitor and avoid vulnerabilities in libraries we use - Assess and improve code & low code quality - Assess Software Architectures and avoid/minimize module entanglements - Benchmark our Open Source and Low Code developments - Focus on good enough development and not over engineer

- In the Architecture Overview of your App, the Scores for Technology Stack give you 2.8 stars for all developments you do in Mendix Low Code (and we use Mendix QSM, the Mendix version of Sigrid) and 5.4 stars for any Java code you use in your Mendix app, this is crazy and should be solved. In a Mendix app you should expect the opposite, 2.8 stars if you use Java instead of the Low code way of developing. If this can be improved, Sigrid is a great tool.

Some quality aspects are monitorable, even though not all the essential ones

Customizability of what is measured and how this works with architecture goals is very low. Immediate feedback for developers missing

We have been using it for months now without any issue, we'll continue to use it and maybe reach out to improve and add new features.

It help us to evaluate and measure the entire scope of things when developing and maintaining or software and platforms. That's very helpful

It can be a bit overwhelming at first, but once you get to know it, you have an amazing tool

Sigrid can help you improve the quality of your code. Beyond duplication, size and complexity issues that a developer can easily locate by himself, also issues concering the coupling and dependencies issues

There are issues concerning the specificity of each programming language or framework, i.e. sigrid appears duplication issues in HTML which a developer cannot avoid

Overall Sigrid is a very good product for real professionals.

Sigrid is a good tool to help manage and maintain your code. It gives a good overvieuw of what is good and not so good. you can steer teams towards a more robust implementation of your software.

To manage teams you need a good understanding of the information it provides. you can not just put a random manager on this and expect it to work. Sigrid is an advanced tool for advanced teams for business that really want there products to work.

Overall, a great product for keeping your code quality in check with quantifiable metrics

Great detection, shows files of interest, gives some suggestions to improve

One downside was that it felt the comparison of maintainability score of new code (on PR) to baseline wasn’t what we expected. The calculations seemed not to factor in untouched (N/A) columns which underestimated improvements (correct me if im interpreting the results wrong)

Sigrid provides actionable points of improvement, and you can track improvement well in time.

It tends to forget your preferences you select on overview pages, which makes it a bit annoying when you navigate back and forth. The Code explorer could be made more user friendly.

The quick feedback you get whenever you push code. It is very easy to go to the refactoring candidates and see where the biggest improvements can be made. But it is also very useful to go to specific files to see how to improve maintainability for this piece of code.

Unfortunately, detecting component dependencies does not work very well for our PHP Symfony projects because of the framework's dependency injection mechanism.

I am a new user. Our company just enrolled Sigrid, and I am still exploring the website.

Nice overview of the software quality of all the applications within our company.

I am still a new user, so I didn't find anything negative yet.

I like to my check my applications for correct syntax

I do not like the maintability risk checks

Great. I still learning how to extract the best from the tool.

QSM is a powerful tool that goes deep in the application functionalities. We are still in the beginning of use, basically we used to identify security breachs into our starter app and we fixed it.

I was expecting more from bill of materials. I wish QSM could help to extract the bill of materials from the application, but only Mendix components. If you go to bill of materials, if shows all the components, even the internal components.

Code review screens are informative and help you write better code.

There could be better explanations on what the suggestion is about, why it is really a problem, and how to solve it with a simple example.

One of Sigrid's standout features is its intuitive interface, making it incredibly user-friendly even for those not tech-savvy.

Nothing everything is the best I haver viewed.

Sigrid en terme de rendement est efficace je suis tout à fait d'accord avec ce système d'amélioration continue de la qualité des applications et la manière professionnelle de le faire. S'il fallait recommencer avec Sigrid je le choisirais encore

Ce que j'apprécie le plus dans Sigrid c'est le processus d'accès au code source qui me permet d'agir sur les différents bug

Il faut juste être attendre l'application peut ne pas bien marcher si on ne s'y connait pas