DevDock

The product page groups commands and their output with the project they belong to. It describes branch and remote-state views and Docker readiness checks. Command execution, Git safeguards, and Docker integration remain Not reviewed.

DevDock is a Windows app sold through the Microsoft Store. You register a local project folder, and it detects the stack and suggests commands by reading a bounded set of manifests and build files, without running package managers or project scripts. Each project then gets its own workspace for its overview, saved commands and their output, run history, health, Docker Compose services, security checks and settings, and a Today view brings back recent projects and pinned daily workflows.

The clearest fit is a developer moving between several repositories with different commands and environments. Keeping the working directory and push destination visible could help catch an ordinary mistake, but the public description does not establish that these protections work at runtime.

The project-specific command history is more concrete than a general dashboard. The page also advertises checks for risky project files and Pro database inspection. Security-check coverage and database permissions remain Not reviewed; the presence of checks should not be read as assurance about a repository.

Version 1.4 shows when Claude Code or Codex is actively working in a project, so you can avoid switching branches under an agent, and adds an Activity Center for running Git work and recent results. The free version covers up to three projects. Pro adds custom workflows and database tools for SQLite, MySQL, MariaDB and PostgreSQL, with schema inspection, read-only lookups of up to 200 rows, migration review and backups. The product page doesn't list the Pro price.

The security audit looks for exposed credentials, private keys, tracked sensitive files, symlinks that escape the folder and missing dependency lockfiles. It runs locally and read-only, and it withholds the secret values it finds. The privacy guide says project records stay on your computer, source files stay where they are, detection makes no network requests, and secret values for custom tasks are stored in Windows Credential Manager rather than with the task. It also points out that commands you run keep their own network behaviour, so an npm install or Docker pull still goes online.