🤖 Vantaverse AI Reviewer

AI-powered code review CLI - analyze your codebase with Gemini AI

Features

• 🔍 Intelligent Scanning - Auto-detects framework (Next.js, React, Vue, Django, etc.)
• 🔒 Security Analysis - Finds vulnerabilities, XSS, injection flaws
• ♿ Accessibility Audit - WCAG compliance checks
• 🧹 Code Quality - Identifies code smells, complexity issues
• 🧪 Test Suggestions - Recommends test cases
• 📊 Detailed Reports - Markdown reports with actionable insights

🚀 v0.2.0 - Performance Optimizations

• ⚡ 50% faster - Parallel local checks (TSC, ESLint, git)
• 💰 80% cost reduction - --diff mode analyzes only changed files
• 🔐 Free security scans - Regex secret detection + npm audit (zero tokens)
• 📊 Cost estimation - Know your token usage before scanning

Quick Start

# Run directly with npx (no install needed)
npx vantaverse-ai-reviewer

# Or install globally
npm install -g vantaverse-ai-reviewer
vantaverse-ai-reviewer scan

On first run, you'll be prompted for your Gemini API key.
Get one free at: https://aistudio.google.com/apikey

Usage

Basic Scan

# Analyze current directory
vantaverse-ai-reviewer scan

# With verbose output
vantaverse-ai-reviewer scan --verbose

🆕 Diff Mode (Recommended for Daily Use)

# Only analyze changed files - saves ~80% tokens!
vantaverse-ai-reviewer scan --diff

# Compare against specific branch
vantaverse-ai-reviewer scan --diff --base develop

Budget Control

# Set max cost limit (prompts if exceeded)
vantaverse-ai-reviewer scan --budget 0.10

# See token estimate with verbose
vantaverse-ai-reviewer scan --verbose

All Options

vantaverse-ai-reviewer scan [options]

Options:
  -o, --output <file>   Output report filename (default: AI_REVIEW_REPORT.md)
  -j, --json            Also generate JSON report
  -t, --types <types>   Analysis types: overview,security,codeQuality,accessibility,uiux,testing
  -v, --verbose         Show detailed output with token estimates
  -d, --diff            Only analyze changed files (uses git diff)
  -b, --base <branch>   Base branch for diff (default: main)
  --budget <usd>        Maximum cost budget in USD
  --full                Force full scan (override --diff)
  --no-security         Skip free security checks

Manage Configuration

# Show current config
vantaverse-ai-reviewer config

# Update API token
vantaverse-ai-reviewer config --action token

# Reset all settings
vantaverse-ai-reviewer config --action reset

Analysis Types

| Type | Description | |------|-------------| | overview | High-level project assessment | | security | Security vulnerabilities and risks | | codeQuality | Code smells, complexity, maintainability | | accessibility | WCAG compliance, screen reader support | | uiux | User experience issues, loading states | | testing | Suggested test cases and coverage |

🔐 Free Security Checks (Zero Cost)

Before using tokens, the CLI runs free local security scans:

1. Secret Detection - Regex patterns for:

   • AWS keys, GitHub tokens, Stripe keys
   • JWTs, private keys, database URLs
   • Generic API keys and secrets

2. npm Audit - Checks for known vulnerabilities

Security

• ✅ Sandboxed - Only reads files within the target repository
• ✅ No arbitrary execution - Uses whitelisted commands only
• ✅ Secure storage - API tokens encrypted locally
• ✅ Privacy first - Code sent only to Gemini API for analysis

Supported Frameworks

Next.js, React, Vue.js, Angular, Svelte, Vite, Django, Flask, Express, NestJS, and generic Node.js projects.

License

MIT