roast-my-code

Offline CLI — koi API key nahi chahiye. Terminal se code do, rule-based analyzer real bugs pakadta hai aur Hinglish/English mein roast karta hai. Har taana ek real issue pe based hai — koi generic jokes nahi.

Setup

npm install -g ./roast-my-code
# ya local test ke liye:
npm link

Koi env variable, koi API key, kuch nahi chahiye. Bas Node.js.

Usage

roast-my-code app.js          # Hinglish (default)
roast-my-code app.js --en     # English
roast-my-code app.js --both   # Dono
cat app.py | roast-my-code --en

Detects (JS/TS + Python + universal)

• Hardcoded secrets/API keys
• var usage, == vs ===, loose equality (Python == None)
• console.log / print() leftovers
• eval()/exec() usage
• innerHTML XSS risk
• Empty catch blocks, bare except:
• Unhandled fetch/axios calls
• SQL injection via string concat
• Unsafe .find() property access
• Mutable default arguments (Python)
• Long functions, long lines, magic numbers, duplicate code, TODO/FIXME leftovers

Notes

• Pure regex/heuristic based — no AST parser, so some edge cases won't be caught and rare false positives are possible.
• Works on any file extension; auto-detects JS vs Python, falls back to running both rule sets if unsure.