npm package discovery and stats viewer.

Discover Tips

  • General search

    [free text search, go nuts!]

  • Package details

    pkg:[package-name]

  • User packages

    @[username]

Sponsor

Optimize Toolset

I’ve always been into building performant and accessible sites, but lately I’ve been taking it extremely seriously. So much so that I’ve been building a tool to help me optimize and monitor the sites that I build to make sure that I’m making an attempt to offer the best experience to those who visit them. If you’re into performant, accessible and SEO friendly sites, you might like it too! You can check it out at Optimize Toolset.

About

Hi, 👋, I’m Ryan Hefner  and I built this site for me, and you! The goal of this site was to provide an easy way for me to check the stats on my npm packages, both for prioritizing issues and updates, and to give me a little kick in the pants to keep up on stuff.

As I was building it, I realized that I was actually using the tool to build the tool, and figured I might as well put this out there and hopefully others will find it to be a fast and useful way to search and browse npm packages as I have.

If you’re interested in other things I’m working on, follow me on Twitter or check out the open source projects I’ve been publishing on GitHub.

I am also working on a Twitter bot for this site to tweet the most popular, newest, random packages from npm. Please follow that account now and it will start sending out packages soon–ish.

Open Software & Tools

This site wouldn’t be possible without the immense generosity and tireless efforts from the people who make contributions to the world and share their work via open source initiatives. Thank you 🙏

© 2026 – Pkg Stats / Ryan Hefner

reviewbot-cli

v1.2.0

Published

AI-powered CLI that streams code review into your terminal before you open a PR

Readme

npm   ci   node   license   stars


Run reviewbot before git push. Get a streaming AI review of your diff in the terminal — bugs, warnings, suggestions — before your teammates see it. Works with OpenAI, Anthropic, Grok, Gemini, or local Ollama.

$ reviewbot

────────────────────────────────────────────────────────────
 reviewbot · openai · gpt-4o
────────────────────────────────────────────────────────────

## Summary
Adds user authentication middleware and updates route handlers.

### CRITICAL
**src/middleware/auth.js:14** — JWT secret falls back to a hardcoded string
when `process.env.JWT_SECRET` is undefined. This will silently pass in
production if the env var is missing.

  // current
  const secret = process.env.JWT_SECRET || 'supersecret';

  // fix
  if (!process.env.JWT_SECRET) throw new Error('JWT_SECRET is required');
  const secret = process.env.JWT_SECRET;

### WARNING
**src/routes/user.js:38** — No error handling on `await db.findUser()`.
An unhandled rejection here will crash the process.

### SUGGESTION
**src/middleware/auth.js:22** — `req.user = decoded` mutates the request
object without a type definition. Consider a typed wrapper or JSDoc.

## What's good
Error responses use consistent status codes throughout.

────────────────────────────────────────────────────────────

Install

npm install -g reviewbot-cli

Or use without installing:

npx reviewbot-cli

Setup

Run the interactive setup:

reviewbot config set-key
? Set up an AI provider API key? › Yes
? Which provider?
  ❯ OpenAI      (gpt-4o)
    Anthropic   (claude-3-5-haiku)
    Grok        (grok-beta)
    Gemini      (gemini-1.5-flash)
    Ollama      (local, no key needed)
? Enter your openai API key (starts with sk-...): ****
Saved. Run: reviewbot

Or set via environment variable:

export OPENAI_API_KEY=sk-...
export ANTHROPIC_API_KEY=sk-ant-...
export GROK_API_KEY=xai-...
export GEMINI_API_KEY=AIza...

Usage

# Review current diff vs main
reviewbot

# Review only staged changes
reviewbot --staged

# Review against a different branch
reviewbot --base develop

# Review only certain files
reviewbot --files "src/**/*.ts"

# Use a specific provider for this run
reviewbot --provider grok
reviewbot --provider gemini
reviewbot --provider ollama --model llama3

# Override the model
reviewbot --model gpt-4-turbo
reviewbot --model gemini-1.5-pro
reviewbot --model claude-3-5-sonnet-20241022

# Review a GitHub pull request
reviewbot --pr https://github.com/owner/repo/pull/42

# Disable streaming (wait for full response)
reviewbot --no-stream

Config

reviewbot config show                       # show current config
reviewbot config set-key                    # change provider / API key
reviewbot config set provider gemini        # switch default provider
reviewbot config set model gpt-4-turbo      # set default model
reviewbot config clear                      # wipe everything

Config is stored at:

  • macOS: ~/Library/Preferences/reviewbot-cli-nodejs/
  • Linux: ~/.config/reviewbot-cli-nodejs/
  • Windows: %APPDATA%\reviewbot-cli-nodejs\

Providers

| Provider | Default model | Key required | Get key | | ----------- | ------------------------- | ----------------- | ------------------------------------------------------------- | | openai | gpt-4o | Yes | platform.openai.com | | anthropic | claude-3-5-haiku-20241022 | Yes | console.anthropic.com | | grok | grok-beta | Yes | console.x.ai | | gemini | gemini-1.5-flash | Yes | aistudio.google.com | | ollama | llama3 | No — runs locally | ollama.com |


GitHub Action

Add reviewbot as an automated PR check:

# .github/workflows/reviewbot.yml
name: AI Review

on:
  pull_request:
    types: [opened, synchronize]

jobs:
  review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - run: npx reviewbot-cli --base ${{ github.base_ref }} --no-stream
        env:
          OPENAI_API_KEY: ${{ secrets.OPENAI_API_KEY }}

How it works

git diff (or PR diff via GitHub API)
    │
    ▼
diff parser + glob filter + truncation (fits in context window)
    │
    ▼
prompt builder (CRITICAL / WARNING / SUGGESTION / NITPICK)
    │
    ▼
AI provider (OpenAI / Anthropic / Grok / Gemini / Ollama) — streaming
    │
    ▼
markdown renderer (CRITICAL in red, WARNING in yellow, terminal-friendly)

Contributing

Issues and PRs welcome. Before opening a PR:

npm test

See CONTRIBUTING.md.


License

MIT © Dipanshu Singh