vibgrate

vibgrate/cli

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

3 stars 0 forks 3 watchers TypeScript Apache License 2.0

ai-assisted cli codebase-analysis dependency-graph dependency-management drift-score mcp nodejs security typescript upgrade-drift

View on GitHub Website

32 Open Issues Need Help Last updated: Sep 15, 2026

Open Issues Need Help

View All on GitHub

Docs: document vg doctor checks and CI exit semantics about 4 hours ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Test: add Bundler (Gemfile.lock) edge-case fixture for vg build about 4 hours ago

enhancement good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Docs: document vg install --compress / vg savings token compression about 4 hours ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Docs: document vg evidence exposure CI exit semantics 1 day ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Docs: document vg sbom delta semantics and CI usage 1 day ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Test: add Poetry (poetry.lock) edge-case fixture for vg build 1 day ago

enhancement good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Docs: document vg scan --drift-budget / --drift-worsening CI gating 1 day ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Test: add Go module workspace (go.work) fixture for vg build 2 days ago

enhancement good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Docs: document vg why / vg bisect for vulnerability attribution 2 days ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Test: add Yarn Berry (yarn.lock v2+) edge-case fixture for vg build 5 days ago

enhancement good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Docs: document vg scan / vg build exit codes for CI gating 5 days ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Test: add Cargo workspace / path-dependency fixture for vg build 5 days ago

enhancement good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Docs: document vg show arch Overview/Architecture canvas toggles (vulns, drift, ownership, churn) 5 days ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Test: add pnpm lockfile edge-case fixture (catalog / engines) for vg build 6 days ago

enhancement good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Bug: import and round-trip existing OpenVEX statements with vg vex --from 7 days ago

bug help wanted

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Enhancement: paginate large MCP lists with stable cursors 7 days ago

enhancement help wanted

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Bug: emit ecosystem-correct PURLs in SBOM exports 7 days ago

bug help wanted

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Docs: clarify network boundaries of vg serve --local and related modes 7 days ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Test: enforce local MCP tool annotations and bounded responses 7 days ago

enhancement help wanted

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Test: prove offline scans perform no network access 7 days ago

enhancement good first issue help wanted

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Docs: document machine-readable scan, report, and SBOM output contracts 7 days ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

CLI: document ignore/exclude patterns for vg build and vg scan (symlinks & large trees) 7 days ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

IAC: add a small deterministic fixture corpus for Dockerfile and Terraform --iac paths 7 days ago

enhancement good first issue help wanted

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

MCP: document vg install / vg serve recovery for assistant wiring failures 7 days ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

SBOM/VEX: document machine-readable outputs and a minimal end-to-end example 7 days ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Docs: make common vg scan/build failures actionable (what failed + what to do) 7 days ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

README: tighten first-screen value prop for AlternativeTo / GitHub visitors 7 days ago

documentation good first issue

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Test: add a deterministic graph fixture for an under-tested language 7 days ago

enhancement good first issue help wanted

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Public roadmap: make vibgrate/cli easy to discover, try, and contribute to 7 days ago

enhancement help wanted roadmap

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Shell grammar: improve docs/warnings for bash case/heredoc parse degradation 7 days ago

documentation good first issue help wanted

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Examples: add a second runnable example beyond examples/github-actions 7 days ago

documentation good first issue help wanted

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift

Docs: add a short --iac scan quickstart (Terraform / K8s / Helm / Dockerfile) 7 days ago

documentation good first issue help wanted

3

Local codebase intelligence for AI coding agents and software teams, in the CLI and VS Code. Vibgrate builds a deterministic Code Graph, measures dependency and runtime drift with DriftScore, maps architecture and blast radius, analyses dependency and vulnerability risk, and generates SBOM/VEX.

TypeScript

#ai-assisted#cli#codebase-analysis#dependency-graph#dependency-management#drift-score#mcp#nodejs#security#typescript#upgrade-drift