Reading the repo — stats and the shipped feed land in about ten seconds…
JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
288 44 3 openLast shipped 1d ago
JavaScript & Node.js open-source SAST scanner. A static analyser for detecting most common malicious patterns 🔬.
The week focused on internal cleanup and modernization. A significant refactor of the probes system extracted shared tracing helpers to reduce duplication and improve maintainability, while a fix corrected the scope handling for synchronous-io detection. Routine dependency updates across both…
Get this in your inbox every Monday →A deterministic 0–100 hygiene score — README, license, CI, tests, docs, and freshness.
Who ships this repo — author concentration and the bus factor across the last 300 mainline commits.
How welcoming this repo is to contributors — issue throughput, close time, responsiveness, and good-first-issue count.
What this project is built on — dependency count by ecosystem, the license mix, and anything worth a legal look before you adopt it.
Whether this project's CI can be trusted — pass rate, run times, flaky runs, and which workflow is the weak link.
Grounded in js-x-ray's README, structure, and recent commits — answers won't invent code they haven't seen.
A Monday email with what shipped, in plain English — no account needed.
Showing raw commit titles for the newest commits. Sign in to generate AI summaries.
fix(js-x-ray): resolve template literal dynamic import specifiers (#723)
A floor, not a guess: counts only commits whose author, co-author trailer, or message explicitly credits an AI tool (Claude, Copilot, Cursor, aider, Codex…). Based on 30 mainline commits. Unattributed AI code isn't counted here — the full audit estimates that separately.
