Welcome to Repolit
Repolit is an AI codebase intelligence platform that helps you understand any codebase in minutes. Point it at a public GitHub repository — or upload a folder or .zip — and Repolit analyzes the project to produce a weighted health score, an interactive architecture map, an AI-assisted security review, a developer onboarding guide, and more.
It runs anywhere you work: as a web app, a command-line tool, and a VS Code extension. Pick the surface that fits your workflow and follow its guide below.
Quickstart
The fastest way to try Repolit is the web app — no install, and no account for your first repository.
- 1Open repolit.online.
- 2Paste a public GitHub repository URL (for example https://github.com/owner/repo), or use UPLOAD FOLDER / UPLOAD ZIP FOLDER to analyze code from your machine.
- 3Press ONBOARD ME. The analysis streams in live as Repolit reads the repository.
- 4Explore the results — the health score, architecture map, security review, onboarding guide, and every other capability.
Prefer the terminal? Install the CLI and analyze from your shell:
$ npm i -g repolit-cliWeb App
The web app at repolit.online is the primary way to run Repolit. There are three ways to give it code:
- Paste a GitHub URL — any public repository, e.g. https://github.com/owner/repo.
- UPLOAD FOLDER — pick a folder from your machine; it is zipped in your browser and uploaded.
- UPLOAD ZIP FOLDER — upload an existing .zip of a project.
Anonymous visitors can analyze one repository with no account. Sign in with a free account to save your analyses and get 100 credits that automatically reset daily.
Analyze a repositoryCLI
The Repolit CLI brings repository analysis to the command line — the same intelligence as the web app, without leaving your terminal. It is published on npm as repolit-cli under the MIT license.
$ npm i -g repolit-cliOnce installed, run it interactively and drill into the parts of a codebase you care about.
Online or offline
By default the CLI uses the hosted AI for the full report set. Press Tab on the home screen — or launch with --offline — to switch to offline mode: a local, deterministic analysis that runs entirely on your machine with no network and no AI, so private or air-gapped source never leaves your disk. Offline mode covers the health score, architecture, dependencies, and code quality; the AI-driven reports (security review, onboarding, and chat) require online mode.
$ repolit --offlineVS Code
The Repolit VS Code extension brings codebase intelligence into your editor — analyze the repository you are working in and get health, architecture, and security insight without switching tools.
VS Code detailsCapabilities
Whatever surface you run it on, Repolit analyzes a project across these dimensions of understanding:
Health Score
7-dimension assessment with evidence-based grading
Security Audit
Vulnerability scanning, secrets detection & CVE mapping
Architecture Map
Interactive visual diagrams of your codebase structure
Bug Detective
AI root-cause analysis with execution trace debugging
Onboarding Guide
Structured 5-day ramp-up plan for new developers
Code Translation
Polyglot translation across 18+ programming languages
Issues AI
Automated GitHub issue triage with severity scoring
Evolution Track
Git timeline analysis with contributor ownership
System Explorer & Graph
Topological graph intelligence mapping modules and dependencies
PR Blast Radius
Pre-merge impact simulation and regression risk scoring
Architecture Policies
Automated architectural boundary & import rule enforcement
Google Gemini 3.8 & BYOK
Gemini 3.8 Flash & Pro with zero downtime and automatic model upgrades
Reading your results
Health score
The headline number is a composite across seven weighted dimensions. Each is graded A–F from concrete evidence in the repository, with specific suggestions for what to improve first. The weights:
Architecture map
An interactive diagram derived from the actual code — modules, layers, and how the pieces connect — so you can grasp the shape of an unfamiliar codebase at a glance.
Security review
Surfaces risky patterns, exposed secrets, and known-vulnerable dependencies, each rated by severity with remediation guidance. It is a fast first-pass review to prioritize attention — not a replacement for a certified security audit.
Onboarding guide
A structured, day-by-day ramp-up plan that takes a new developer from first clone to productive contributor — what to read, what to run, and which parts of the system to understand in what order.
Code translation
Translate code between 18+ programming languages while preserving intent and idiom — useful for porting, learning an unfamiliar language, or migrating a component.
System Explorer & Graph
The System Explorer builds a live topological graph of your codebase. It parses entry points, maps files into architectural domains and layers, and performs static import resolution to detect circular dependencies and hidden module coupling.
Domain & Layer Classification
Files are automatically organized into domains (e.g. Core, Auth, API, Storage, UI) and tiers (Entry points, Presentation, Application Logic, Infrastructure) to give developers an architectural mental model in seconds.
Circular Dependency Discovery
Repolit detects cyclic graph paths across modules before they manifest as runtime bugs, memory leaks, or bundler packaging issues.
PR Blast Radius & Risk
Before merging code, Repolit simulates the blast radius of proposed pull requests. By tracing imported and downstream references from modified files, PR Intelligence highlights every dependent file that could be affected.
Risk Factor Analysis
Calculates a weighted risk score based on change volume, architectural depth, core file modifications, and public API signature mutations.
Targeted Test Recommendations
Generates a checklist of specific integration and unit tests that must be run to validate the change without regressing the rest of the application.
Architecture Policies
Enforce structural discipline with automated architectural policies. Repolit allows teams to establish rules governing imports, layering, and separation of concerns.
Enforcement Rules
Set strict constraints such as "UI components cannot import DB models directly", "Domain core cannot import presentation code", or "Only API routes may access secret credentials".
Compliance Auditing
Every analysis run checks the repository against active rules, flagging exact file paths, offending lines, and remediation tips.
AI Models & BYOK
Repolit is powered by Google's latest Gemini 3.8 Flash, offering high-throughput architecture reasoning and synthesis. Signed-in users can also select Gemini 3.8 Pro or Gemini 3.8 Flash-Lite.
Zero-Downtime Model Migration
When AI providers retire legacy models (such as Gemini 2.5 Flash), Repolit automatically migrates requests to current live models without requiring code changes or causing broken analysis runs.
Bring Your Own Key (BYOK)
Add your personal Gemini, OpenAI, or Anthropic API key in Profile Settings to bypass shared quotas and enjoy unlimited repository scans with priority processing.
FREQUENTLY ASKED QUESTIONS
What is Repolit?
How does Repolit analyze a repository?
Is Repolit free to use?
What does the codebase health score measure?
Which programming languages does Repolit support?
Can I run Repolit locally without sending my code to the cloud?
Does Repolit have a CLI and a VS Code extension?
How is Repolit different from just reading the README?
Is Repolit open source?
Support & source
Repolit is open source under the MIT license. The source, issues, and releases live on GitHub — the best place to report a bug or request a feature.