SolveLang Repository Audit

See what is inside a repository before changing it.

Upload a repository archive and get a deterministic read-only inventory, architecture signals, duplicate and backup candidates, generated-output warnings, and downloadable evidence. The scan stays in your browser.

No account requiredRuns locallyNo code executionEvidence export

Connect a repository

Connect a repository with GitHub

Install the SolveLang Process Solution app on a repository and the audit runs on the connected repo — the app connection is the sign-in, and nothing is uploaded. Prefer not to connect? The archive upload below stays as the no-connect option.

Connect with GitHubYou choose the repositories on GitHub. Read-only audit summary; no file contents leave GitHub.

Audit a connected repository

Checking your session…

Local repository scan

Upload a repository archive

Export a repository as ZIP or TAR. The archive is extracted and analyzed in this browser; files are not uploaded to SolveLang.

Drop a repository archive hereZIP, TAR, TAR.GZ, or TGZ · maximum 50 MB compressed · up to 20,000 entriesChoose archive

No archive selected

Analyze only

Safe by default

✓ Rejects traversal, links, corrupt headers, and unsafe archive objects
✓ Detects languages, frameworks, package managers, and deployment files
✓ Finds exact duplicates, backup candidates, generated output, and large files
✓ Maps bounded JavaScript/TypeScript dependencies and impact hotspots without executing code
✓ Summarizes bounded architecture and security-boundary paths as structural evidence
✓ Maps explicit repository-local deployment, Angular/Nest framework, and Angular target tsConfig references without executing code
✓ Presents bounded Docker Compose services, literal image declarations, and explicit depends_on relationships without evaluating Compose or starting containers
✓ Flags credential patterns with values redacted from reports and the UI
✓ Never executes repository code, scripts, hooks, or package managers
✓ Produces product JSON, integrity-covered canonical, architecture, deployment, Docker Compose inventory/relationship, framework, and Angular target-config evidence JSON, and a printable HTML report

No file is deleted, moved, renamed, merged, or rewritten. Cleanup recommendations require a separate branch, validation, rollback planning, and human approval.