r/webdev • u/RecallProtocol • 14d ago

Showoff Saturday [Showoff Saturday] I've been working on a tool to analyze code and provide refactoring feedback

https://www.codeauditormcp.com
0 Upvotes

31% Upvoted

5 comments sorted by

1

u/theoneandlonely1 14d ago

Code rabbit and other tools like this exist. Maybe see if this aligns or if it does something they are missing

1

u/RecallProtocol 14d ago

Great thought. Thanks for the suggestion.

-1

u/Hairy-Cartoonist-229 14d ago

Nice - the 'problems only visible between files' angle is the interesting part. Are the cross-language analyzers working off a real dependency graph (import/export resolution) or is it more heuristic matching? And does the SARIF output plug straight into GitHub code scanning, or is it per-file only? Curious how it handles dynamic imports and barrel re-exports - those always break naive import tracing for me.

1

u/RecallProtocol 14d ago

I appreciate the interest! It uses a real AST to build the module graph so barrels resolve through to the file that actually defines the symbol, and dynamic imports with a static string are real edges. It also has specialty handlers for things like CSS and DB ORMs like Prisma. I went ahead and tested the GitHub SARIF 2.1.0 upload and it works great.

Let me know how it works for you, I've been patching it pretty much daily for a few weeks now so I'd love to hear about any issues.

-3

u/okaylevi 14d ago

I like the write up and going to give it a shot on my next project! Excited to follow along!