So I built a CLI that just... tells you this stuff. Point it at any repo, get back structured data — language breakdown, dependency counts, CI setup, health signals, security basics.
pip install repocrunch
repocrunch analyze vercel/next.js --pretty
No AI, no LLMs, no API keys beyond a GitHub token. Same repo, same output, every time. I mainly use it for dependency due diligence — is this library actually maintained, what's it written in, does it have basic security hygiene.Also works as an MCP server if you want to give your AI coding assistant real repo data instead of hallucinated star counts.
Happy to talk about the implementation or the weird things I've found analyzing repos.