RepoX-Ray

Drop your codebase. See what you inherited.
100% browser-based developer security and codebase intelligence.

Live Demo · GitHub · Quick Start

---

RepoX-Ray lets developers upload a local project folder or ZIP file and instantly generate a visual report of the codebase. All analysis happens locally in your browser — no upload, no account, no backend.

🔒 Runs entirely in your browser.

Screenshots

Drop & scan

Drop a folder, ZIP, or browse files. Your source code never leaves the browser.

X-Ray complete

Instant security score, risk summary, and your biggest finding — the magic moment after scanning.

Dashboard

Security score, project detection, and prioritized “Fix First” recommendations.

Secret scanner

Detects AWS keys, Stripe secrets, JWTs, private keys, and more — always masked by default.

Architecture & codebase map

Architecture detection, graph, and risk heatmap

Repository stats, language breakdown, and codebase map

Features

• ✓ Codebase visualization
• ✓ Secret scanning (AWS, GitHub, Stripe, JWT, private keys, and more)
• ✓ Dependency analysis (npm, CocoaPods, Cargo, Go, Gradle, Python)
• ✓ Architecture detection (MVVM, MVC, Feature-based, Clean)
• ✓ Security heuristics and risk scoring
• ✓ Code hotspots and god file detection
• ✓ Git hygiene analysis
• ✓ Duplicate detection
• ✓ Asset analysis
• ✓ Local reports (HTML, JSON, Markdown)
• ✓ Scan comparison and local history
• ✓ Command palette (⌘K)
• ✓ Demo mode

Privacy

Your source code never leaves your browser.

• No upload to any server
• No account required
• No backend or database
• No API keys needed
• Scan history stores metadata only — never source code
• Secrets are masked by default; reveal locally only if you choose

Quick Start

git clone https://github.com/shubhransh-gupta/repox-ray.git
cd repox-ray
npm install
npm run dev

Open http://localhost:5173 for the marketing site, or http://localhost:5173/app to launch the analyzer.

Usage

1. Drop your repository (folder or ZIP)
2. Wait while RepoX-Ray scans locally
3. Review the X-Ray complete summary
4. Explore the dashboard — security, secrets, architecture, dependencies, hotspots
5. Export a report or compare scans over time

Supported Input

• Folder upload (via browser directory picker)
• ZIP file upload
• Drag and drop

Ignored Directories (default)

node_modules, .git, DerivedData, build, dist, Pods, .venv, target, and more. Configurable in Settings.

Tech Stack

• React 19 + TypeScript
• Vite
• Tailwind CSS 4
• JSZip (local archive extraction)
• IndexedDB (scan history)
• Web Crypto API (duplicate hashing)
• Web Workers (non-blocking analysis)

Deploy to GitHub Pages

npm run build:pages

Or push to main — GitHub Actions will build and deploy automatically.

Live demo: https://shubhransh-gupta.github.io/repox-ray/

Project Structure

src/
├── analyzers/       # Modular analysis plugins
├── components/      # UI components
├── context/         # App state
├── data/            # Demo data
├── pages/           # Marketing page
├── types/           # TypeScript types
├── utils/           # File I/O, export, storage
└── workers/         # Web Worker analysis

Regenerate Screenshots

npm run dev
npm run screenshots

Disclaimer

RepoX-Ray performs static analysis heuristics, not a formal security audit. Findings include confidence levels. Never claim your code is "secure" based solely on this tool.

"No obvious issues detected by the current rules."

License

MIT — see LICENSE

Contributing

See CONTRIBUTING.md

Security

See SECURITY.md for reporting vulnerabilities.