Assess, plan, evolve.
Reusable compiler-aware skills that help coding agents understand, plan, and safely evolve your codebase.
65 packages
Read-only mining for stale Backstage feature flags. Single JSSG step builds a repo-wide declare/consume index, then emits backstage_feature_flag_stale for declared-unused and consumed-undeclared names with confidence metadata.
- mining
- metrics
- +6
Read-only mining codemod for Backstage FeatureFlagsApi usage sites. Detects declarations, isActive checks, FeatureFlagged gates, extension $contains predicates, registerFlag calls, and UI-schema featureFlag fields. Emits backstage_feature_flag_usage metrics; leaves source unchanged.
- mining
- metrics
- +6
Mine JavaScript/TypeScript performance issues via read-only JSSG metrics (N+1 I/O, async waterfalls, unbounded concurrency, expensive loop work, missing cleanup). Each step emits the same js_ts_perf_issue atom.
- mining
- metrics
- +7
Solid 1.9 to Solid 2 RC migration assistant: read-only analyzer plus deterministic legacy import-path relocation for project-owned JavaScript and TypeScript source
- solid
- solidjs
- +8
Mine TypeScript async serialization / parallelization opportunities via read-only JSSG metrics (await-in-loop, consecutive awaits, async reduce, sequential chunks, repeated await calls). Combines syntax detection with light data-flow filtering.
- mining
- metrics
- +5
Mine TypeScript types that make illegal states representable
- mining
- metrics
- +3
Deprecated. Use rails-migration-assessment-bundle instead: https://app.codemod.com/registry/rails-migration-assessment-bundle
- deprecated
- mining
- +7
Run a coordinated read-only JavaScript and TypeScript reliability audit across async construction, promises, control flow, numeric checks, regular expressions, tests, React runtime pitfalls, class accessors, sorting, reducers, and unreachable code.
- javascript
- typescript
- +5
Run the split JavaScript and TypeScript security audit bundles for cloud and infrastructure, authentication and cryptography, injection risks, and web and header configuration.
- Bundle
- javascript
- typescript
- +4
Run a read-only JavaScript and TypeScript security audit focused on web middleware, headers, CSRF, CORS, request limits, file uploads, debug output, and error exposure risks.
- javascript
- typescript
- +8
Run a read-only JavaScript and TypeScript security audit focused on injection, XSS, SSRF, path traversal, prototype pollution, command execution, and unsafe dynamic execution risks.
- javascript
- typescript
- +7
Run a read-only JavaScript and TypeScript security audit focused on authentication, secrets, cookies, cryptography, TLS, randomness, and browser storage risks.
- javascript
- typescript
- +7
Ready to evolve your codebase?
Build tailored, compiler-aware skills to assess, plan, and automate complex codebase changes.