Slopometer

AI-powered code scanner that detects your tech stack, finds issues, and generates actual fixes you can apply. Ship with confidence.

Live at slopometer.com

Features

• Smart Detection - AI analyzes your repo structure and applies context-appropriate standards
• Real Issues - Finds secrets, hallucinated packages, missing error handling, CVEs
• Actual Fixes - Every issue comes with copy-paste ready code, not vague suggestions
• Any Tech Stack - Swift, Kotlin, TypeScript, Python, Go, Rust, and more

Quick Start

Web

Visit slopometer.com and paste any GitHub repo URL.

CLI

# Install globally
npm install -g slopometer

# Scan any public repo (no account needed!)
slopometer scan facebook/react
slopometer scan expressjs/express

# Scan current directory (detects GitHub remote)
slopometer scan .
slopometer scan

# Options
slopometer scan owner/repo --json      # JSON output for CI/CD
slopometer scan owner/repo --quiet     # Minimal output

# For private repos, provide a GitHub token
slopometer scan owner/private-repo --github-token YOUR_TOKEN

No API key required for public repos! Just install and scan.

What It Detects

| Category | Examples | |----------|----------| | Security | Hardcoded secrets, API keys, credentials | | Dependencies | Hallucinated packages, CVEs, outdated deps | | Code Quality | Missing error handling, console.log in prod | | Production | Missing timeouts, health checks, rate limits | | AI Slop | Placeholder code, TODO bombs, template artifacts |

Exit Codes (CLI)

• 0 - Ship it! (or ship with caution)
• 1 - Do not ship (blockers found)

CI/CD Integration

# GitHub Actions example
- name: Run Slopometer
  run: |
    npx slopometer scan ${{ github.repository }} --json > report.json
  env:
    SLOPOMETER_API_KEY: ${{ secrets.SLOPOMETER_API_KEY }}

Development

# Install dependencies
npm install

# Run dev server
npm run dev

# Build CLI
npm run cli:build

# Run tests
npm test

# Push database changes
npm run db:push

Environment Variables

# Required for web app
DATABASE_URL=postgresql://...
GITHUB_CLIENT_ID=...
GITHUB_CLIENT_SECRET=...

# Optional
STRIPE_SECRET_KEY=...
STRIPE_WEBHOOK_SECRET=...
ANTHROPIC_API_KEY=...
OPENAI_API_KEY=...
GOOGLE_AI_API_KEY=...

License

MIT