Point Repolit at a GitHub repository or upload your own code, and it analyzes the project across full topological graph intelligence, security, weighted health scores, PR blast radius, and architecture policies — so you can understand an unfamiliar codebase in minutes instead of days.
A composite codebase health score across seven weighted dimensions — security (22%), code quality (18%), testing (18%), documentation (15%), dependencies (12%), architecture (8%), and maintainability (7%). Each dimension is graded A–F from concrete evidence found in the repository, with specific, actionable suggestions for what to improve first.
An AI-assisted security review that surfaces risky patterns, exposed secrets and API keys, and known-vulnerable dependencies — each rated by severity with remediation guidance. It is a fast first-pass review to prioritize attention, not a replacement for a certified security audit.
Interactive visual diagrams derived from the actual code — modules, layers, and how the pieces of the system connect — so you can grasp an unfamiliar codebase's shape at a glance instead of clicking through hundreds of files.
Describe a bug and Bug Detective reasons about the likely root cause by tracing the relevant execution path through the code, pointing you at the source instead of just restating the symptom.
A structured, day-by-day ramp-up plan that takes a new developer from first clone to productive contributor — what to read, what to run, and which parts of the system to understand in what order.
Translate code between 18+ programming languages while preserving intent and idiom, with optional surrounding context to guide the translation — useful for porting, learning an unfamiliar language, or migrating a component.
Automated triage of a repository's GitHub issues with severity scoring, so you can see what actually matters and where to focus first instead of reading every open issue by hand.
Analyzes the git timeline and contributor ownership to show how a codebase — and its authorship — evolved over time, so you know who to ask about which part of the system.
A complete graph intelligence engine that parses and maps the entire dependency topology of your project. Detects architectural layers, entry points, circular dependencies, and module relationships across your entire codebase.
Simulate proposed Pull Requests before merging. Analyzes affected downstream consumers, calculates the blast radius, flags breaking changes in exported contracts, and grades deployment risk.
Define, audit, and enforce architectural rules (such as 'clean architecture layers', 'forbidden cross-module imports', and 'isolation boundaries') with automated compliance checks and violation reports.
Powered by Google's latest Gemini 3.8 Flash & Pro. Built with self-healing model deprecation fallbacks and Bring-Your-Own-Key (BYOK) for unlimited usage.
Free to start — analyze one repository with no account, or sign in to save your analyses and scan more. Available as a web app, a CLI, and a VS Code extension.
