TypeScript Code Analyzer
Paste a public GitHub URL and REPO-SIGHT reads your TypeScript source directly — complexity, type-safety erosion, and 16 rules built specifically for TypeScript. Free.
What REPO-SIGHT checks in your TypeScript code
16 rules, tuned for TypeScript — 7 of them security-specific. .tsx is analyzed as TypeScript.
Complexity & structure
Cyclomatic complexity, max nesting depth (flagged past 6 levels), and functions over 100 lines — the same thresholds used in the health score.
Type-safety erosion
ts-explicit-any and ts-var-usage flag the two most common ways TypeScript code quietly gives up the type safety it's supposed to provide.
Loose equality & swallowed errors
ts-loose-equality (== vs ===) and ts-empty-catch-block catch two habits that hide bugs until runtime.
XSS & injection risk
ts-sec-inner-html, ts-sec-sql-string-concat, and ts-sec-eval flag three well-known routes to injected code or markup.
Disabled TLS & weak crypto
Disabled TLS certificate checks, child_process.exec, hardcoded secrets, and weak hashes round out 7 security checks in total.
Duplication & debt
Token-based clone detection across the whole repo, plus every TODO/FIXME counted — ts-todo-without-ticket flags the ones with no ticket reference.
function handleResponse(data: any) {
return data.value;
}Illustrative example. ts-explicit-any: typing the parameter any opts the whole function back out of TypeScript's type checking — a real interface (even a partial one) keeps the guarantee.
Frequently asked questions
Does it analyze .tsx files?
Yes — .tsx is treated as TypeScript, since JSX-in-TS is still TypeScript syntax for analysis purposes.
How is this different from ESLint?
ESLint needs a config file and a local install per project. REPO-SIGHT runs from a GitHub URL alone, across the whole repo, and rolls the result into a single project health score — no config to write.
Does REPO-SIGHT run or type-check my code?
No. It's static analysis only — the source is parsed, never compiled, executed, or type-checked against your tsconfig.json.
Is it actually free?
Yes — no tiers, no paywalled metrics. A small amount of advertising covers hosting instead of a paid plan.
Other languages
Related reading
Scan a repository in seconds.
No tiers and no paywalled metrics; a small amount of advertising pays for hosting. Sign-in is optional for public repositories and required for private ones.