kimwwk/repocrunch

Analyze any public GitHub repository into structured JSON. No AI, no LLMs — fully deterministic.
Give it a repo, get back tech stack, dependencies, architecture, health metrics, and security signals in clean, consistent JSON. Use it as a Python library, CLI tool, REST API, or MCP server.
Quick Start
Requires **Python 3.11+**.
That's it. Also works with uv:
Install from source
Install just what you need:
Set a GitHub Token (optional)
Without a token you get 60 API calls/hour. With one, 5,000/hour. A token also lets you analyze **private repositories** you have access to.
Usage
CLI
Python Library
REST API
MCP Server (for Claude, Cursor, etc.)
Sample Output
Supported Ecosystems
| Language | Manifest Files | Package Manager Detection |
|----------|---------------|--------------------------|
| JavaScript / TypeScript | package.json | npm, yarn, pnpm, bun (from lockfiles) |
| Python | pyproject.toml, requirements.txt | pip, poetry, uv, pdm, pipenv |
| Rust | Cargo.toml | cargo |
| Go | go.mod | go |
| Java / Kotlin | pom.xml, build.gradle, build.gradle.kts | maven, gradle |
| Ruby | Gemfile | bundler |
| C / C++ | CMakeLists.txt | cmake |
Framework detection covers 40+ frameworks across all supported ecosystems (FastAPI, Django, React, Next.js, Spring Boot, Rails, Gin, Actix, and many more).
What It Detects
| Category | Signals |
|----------|---------|
| **Summary** | Stars, forks, watchers, age, license, languages |
| **Tech Stack** | Runtime, framework, package manager, direct/dev dependency count, key deps |
| **Architecture** | Monorepo, Docker, CI/CD platform, test framework |
| **Health** | Commit frequency (daily/weekly/monthly/sporadic/inactive), maintenance status, contributors, open issues |
| **Security** | .env file committed, Dependabot enabled, branch protection, SECURITY.md present |
Roadmap
Not yet implemented, but planned:
- **Secrets regex scanning** — detect leaked API keys, tokens, passwords in the file tree
- **Architecture type classification** — library vs. application vs. framework
- **API rate limiting** — per-key throttling for the REST API
- **npm/npx package** — npx repocrunch analyze owner/repo