Idris Altun

A lot of people paste code from an AI without really knowing what it creates. LookFirst reads the code and shows, step by step, what will be built, how the parts connect and where the security gaps are, such as open ports or keys in plain text. Every piece of advice links to Microsoft's or Amazon's own security guidance.

Available as a VS Code extension, a command-line tool, a GitHub Action and a web page. Releases are signed.

Residents report faults, book laundry times, pay invoices and read documents. Staff have their own portal with cases, a housing queue, roles and permissions. Every customer gets a separate Azure environment with its own sign-in, colours and logo.

An API and webhooks for other systems, an audit log and GDPR export. Everything is deployed with scripts and ARM templates.

One command builds an Azure SQL database that isn't reachable from the internet at all. The developer gets in through a tunnel over Azure Relay using their normal sign-in, with no passwords or keys. When the work is done, another command tears everything down.

App secrets and certificates that are expiring, apps nobody owns anymore, and Logic Apps connections that depend on a single person. The tool only needs read access. When I ran it against my own tenant, it found three apps without an owner.

The app counts how long you've spent in social apps and shows what the same time could have been used for, like a walk or a chapter of a book. It has daily goals, a gentle pause screen and a widget.

The app has no internet permission at all, so nothing can leave the phone.

I needed PDFs where commands can be copied and pasted without breaking. The extension splits long commands correctly for PowerShell, bash and cmd, draws Mermaid diagrams offline and reads the finished PDF afterwards to check that every code line can be copied in full.