Skip to Main Content

VibeForge

Built at Meta Global AI Developer Hackathon · Oct 26, 2026 · Remote

VibeForge — Demo video

AI coding tools let anyone build an app in an afternoon, but they don't keep that work safe. Vibe coders ship without version control, code review or security checks. One prompt can overwrite a version that worked, an API key ends up in the source, and nobody asks whether the stock photo or font is licensed or whether the app collects personal data. Tools built for developers assume skills these builders don't have. VibeForge is an artifact repository built for people who build with AI. A project is a timeline of milestones: the whole project, zipped, labelled, numbered and never overwritten. Works inside your AI tool: VibeForge is an MCP server. Add it to Claude Code, Cursor or VS Code with one command, and your AI pushes, lists and restores milestones when you ask: "save a milestone: login works." See it, not just files: each milestone opens with a "How it looks" preview. With no screenshot, Meta Muse reads the screen code and sketches one, rendered safely in a sandbox. Scanned on arrival: leaked secrets, unsafe archives and vulnerable packages across seven languages (OSV), with a full SBOM (CycloneDX and SPDX). Meta Muse AI review: Muse finds what pattern scanners miss (hidden secrets, security gaps, bad practices) and explains each in plain English with a score, fix steps and a ready-to-paste prompt for your AI tool. Meta Muse assessment: a release-readiness report covering audience, platforms, deployment, licence, personal data and payments, and third-party assets such as stock photos, paid fonts and brand logos, each with a plain fix. Admins can search every report. Git when you're ready (PR #5): Muse writes a .gitignore and hooks tailored to the project, plus a setup script. One-step restore: tell your AI "restore my folder to milestone one." VibeForge saves where you are first, then puts the old version back. Built for teams: spaces with Owner, Coder and Reader roles, forks and a marketplace, plus SSO (OIDC), SCIM, MFA, S3 storage and policy gates. Rust (Axum) backend, React and TypeScript web app, and an open standard (vibe-artifact/1.0). Push, scan, fix, restore.

Team