Understand any codebase visually.
Open the live Vercel web application
RepoDNA turns unfamiliar Python, JavaScript, and TypeScript repositories into interactive structural maps, with experimental Go analysis for files, symbols, imports, routes, databases, external systems, architecture layers, execution traces, impact slices, and onboarding.
It is deterministic, local-first, and does not use an LLM. The analyzer reads source code as text and never executes repository code.
Paste any public GitHub repository link to decode architecture layers, execution traces, dependency graphs, and entry points in seconds.
- Universal URL Support: Accepts standard links (
https://github.com/owner/repo), subpages (.../tree/main,.../blob/develop/app.py), issues/PRs, short syntax (github.com/owner/repo,owner/repo), and SSH URLs. - Draggable Layout & Saved Views: Freely reposition nodes on the canvas. Your custom layout, zoom level, and active layer filter automatically persist locally in your browser (with a 1-click
↺ Reset Viewoption to restore defaults).
Sign in with GitHub to access your private repositories:
- Scope Transparency: When configured, private repository support uses a GitHub App installation with per-repository
contents:readandmetadata:readpermissions. OAuthreposcope remains a compatibility fallback when the App is not configured. RepoDNA performs read-only analysis transiently in memory and never modifies repository code. - Installed-repository listing: In App mode, RepoDNA first lists the installations you can access and then calls the per-installation repository endpoint. It does not use a broad
/user/reposlisting in this mode. - Revocation: Easily disconnect access at any time via the UI or GitHub Settings.
- Transience: OAuth tokens and repository code are never saved to disk or databases.
- Local Folder Picker: Select any project directory from your computer (
webkitdirectory). All parsing runs 100% inside your browser tab. - Local .zip / .json Upload: Drop a zipped source archive or an existing
repodna.jsonanalysis. - Automatic Fallback: If server analysis is rate-limited or unavailable, the web app automatically falls back to in-browser parsing.
Open Relationship explorer → Code Graph → Export to download the full canonical graph, independent of the current visual filter or layout. Each export includes nodes, relationships, groups, group memberships, unresolved links, source evidence, confidence, properties, coverage, and completeness metadata.
- Graph JSON: validated against
schema/repodna-graph-export-v1.schema.json. - CSV tables: a deterministic ZIP containing
nodes.csv,relationships.csv,groups.csv,group_memberships.csv,unresolved.csv, andmanifest.json; spreadsheet formula-leading values are escaped. - Neo4j Cypher: deterministic, escaped, idempotent Neo4j 5+
MERGEstatements with no APOC, LLM, or AI API key requirement. - Parquet: a five-table Snappy-compressed ZIP, enabled on the Vercel Production deployment via
NEXT_PUBLIC_REPODNA_PARQUET_EXPORT=trueand switchable per environment.
Exports use a private seven-day Vercel Blob cache for public commit-addressed analyses, short-lived signed download URLs, and an explicit opt-in IndexedDB cache for browser-local derived artifacts. See docs/graph-exports.md for the exact schema, cache behavior, limits, import instructions, and verification contract.
- Method:
POST(POST-only for credential and query privacy) - Headers:
Content-Type: application/json - Body:
{ "url": "https://github.com/owner/repository" }
| Status | Code | Description |
|---|---|---|
200 |
SUCCESS |
Repository successfully parsed and architecture resolved. |
400 |
INVALID_REQUEST / INVALID_GITHUB_URL / MALFORMED_JSON / PATH_TRAVERSAL |
Missing parameters, invalid GitHub URL, malformed JSON, or path traversal detected in archive. |
404 |
REPO_NOT_FOUND |
Public GitHub repository not found or repository is private / insufficient permissions. |
413 |
ARCHIVE_TOO_LARGE / EXTRACTED_TOO_LARGE / TOO_MANY_FILES |
Repository exceeds enforced size/count resource limits. |
429 |
RATE_LIMITED |
IP sliding window exceeded (5 req/10m public, 20 req/10m authenticated). Includes Retry-After. |
502 |
UPSTREAM_GITHUB_ERROR |
Upstream GitHub API rate limit, gateway error, or organization SAML approval needed. |
503 |
RATE_LIMIT_UNAVAILABLE |
Rate limiting infrastructure failure (fail-closed, triggers client browser fallback). |
504 |
FETCH_TIMEOUT |
Upstream GitHub download timed out after 20 seconds. |
- Authenticated endpoint returning sanitized metadata (
fullName,isPrivate,language,defaultBranch,updatedAt) for authorized user repositories with pagination and query search. Never logs or sends repo names to analytics.
- Collects usefulness scores (1-5), primary use cases, desired capabilities, and optional 500-char feedback without PII with enforced streaming payload bounds (<= 16 KB).
| Limit | Browser / private analysis | Public durable analysis | Action upon breach |
|---|---|---|---|
| Public rate limit | 5 analyses / 10 min per IP | Same | Returns 429 RATE_LIMITED |
| Authenticated rate limit | 20 analyses / 10 min per user | Same | Returns 429 RATE_LIMITED |
| Candidate repository files | 10,000 files | 20,000 files | Browser/private returns 413 TOO_MANY_FILES; public durable produces an honest partial inventory (max_files_limit) |
| Total archive entries | 20,000 entries | 100,000 entries | Returns 413 TOO_MANY_ARCHIVE_ENTRIES (header bomb defense) |
| Individual file size | 1 MB (1,000,000 bytes) | Same | Skipped with diagnostic (exceeds_file_size_limit) |
| Declared compression ratio | 200:1 (entries emitting > 256 KB decompressed) | Same | Entry is quarantined, not fatal: its stream is terminated and buffers discarded, it is skipped with a suspicious_compression_ratio diagnostic, and analysis of the remaining safe files continues. Every emitted byte—including quarantined entries—still counts toward the cumulative extracted-bytes cap. |
| Compressed archive download | 25 MB (26,214,400 bytes) | 128 MB before Git-tree fallback | Browser/private returns 413 ARCHIVE_TOO_LARGE; public durable uses bounded archive or Git-tree acquisition |
| Extracted content | 100 MB (104,857,600 bytes) | 192 MB | Browser/private returns 413 EXTRACTED_TOO_LARGE (ZIP bomb protection); public durable produces an honest partial inventory when bounded limits are reached |
| Interactive graph | 8,000 nodes / 12,000 edges in the v2 artifact; 240 rendered nodes / edges in the live canvas | Same | Preserves full inventory and reports compaction diagnostics |
| GitHub fetch timeout | 20 seconds | 60 seconds | Returns a controlled upstream timeout/failure |
For production deployments on Vercel:
# Authentication (Auth.js / GitHub OAuth)
AUTH_SECRET="your-32-byte-auth-secret"
AUTH_GITHUB_ID="your-github-oauth-client-id"
AUTH_GITHUB_SECRET="your-github-oauth-client-secret"
# Preferred GitHub App mode (contents:read + metadata:read per installation)
GITHUB_APP_ID="your-numeric-app-id"
GITHUB_APP_PRIVATE_KEY="your-pem-or-base64-private-key"
GITHUB_APP_CLIENT_ID="your-Iv1-client-id"
GITHUB_APP_CLIENT_SECRET="your-app-client-secret"
GITHUB_AUTH_MODE="github-app" # optional; auto-detects when omitted
# Privacy-Safe Analytics (PostHog EU)
NEXT_PUBLIC_POSTHOG_KEY="your-posthog-project-api-key"
NEXT_PUBLIC_POSTHOG_HOST="https://eu.i.posthog.com"
# Multi-Tier Rate Limiting (Upstash Redis)
UPSTASH_REDIS_REST_URL="https://your-upstash-redis.upstash.io"
UPSTASH_REDIS_REST_TOKEN="your-upstash-token"# Run the Vitest unit, security invariant, analyzer, and export-contract tests
npm run test:unit
# Run Python core test suite (30 unit, parity, and conformance tests)
npm run test:python
# Run Playwright browser contracts (use REPODNA_E2E_PORT if port 3000 is busy)
REPODNA_E2E_PORT=3100 npm run test:e2e
# Run ESLint + Vitest + Next.js build
npm test
# Run native Vercel Next.js build
npm run build:vercelThe fastapi-basic and express-basic parity cases run both the TypeScript
engine and the Python engine (core/repodna) over the same fixtures and
fail hard when the Python engine is unavailable, crashes, emits
unparseable output, or diverges from the TypeScript engine. A missing Python
implementation can never silently pass.
- Locally, contributors without a Python environment can set
REPODNA_ALLOW_PYTHON_PARITY_SKIP=1to skip the Python half of the parity cases instead of failing. - CI never sets that variable: a dedicated
parityjob installs the Python engine (python -m pip install -e .) and enforces the contract fail-hard on every push and pull request.
- Formal Schema: Analysis artifacts conform to
schema/repodna.schema.json(v1.1.0). - Security Model: Detailed zero-code-execution guarantees and vulnerability policy in
SECURITY.md. - Threat Model: Complete threat matrix and mitigations in
docs/threat-model.md. - Static Analysis Boundaries: Detailed analysis limits and confidence scoring in
docs/analysis-limitations.md. - Architecture Decisions: Full list of ADRs in
docs/adr/.