Product

From unfamiliar repository
to an explorable codebase.

Xolvyn helps developers understand unfamiliar codebases. Analyze a GitHub or GitLab repository, explore its structure and dependencies, and investigate security findings alongside the affected code.

AnalyzeView Plans

Source

Static analysis

Files

Dependency relationships

Context

Security findings

@mentor

Questions about the analysis

How it works

Choose a repository, analyze its structure, and explore the results.

01

Paste a repository URL

GitHub or GitLab — public or private. No configuration or YAML files needed.

02

Xolvyn analyzes your codebase

We use a temporary server-side clone to map resolved imports and run available security checks.

03

Explore the interactive results

Navigate the dependency map, review security findings, and chat with @mentor.

Dependency Graph

Explore file dependencies.

Browse a dependency map computed from supported source files. Follow resolved imports and inspect connected files alongside the source.

  • Layer-colored nodes (core, service, util, config, route)
  • Directed import relationships between files
  • Click any node to inspect issues and code context
  • Progressive disclosure — expand on click
  • Export analysis data as JSON
Security Audit

Investigate detected security findings.

Available checks flag potential source-code and dependency issues. Review severity, source locations and remediation suggestions; a clean scan does not establish security.

  • Analysis grade and score with the assessed maximum
  • Critical, high, medium, low severity classification
  • Source locations where available
  • Remediation suggestions per issue
  • Export audit reports as JSON
AI Mentor

Ask questions with repository context.

Ask @mentor about the repository using its analysis as context. Check important answers against the linked files.

  • Context-aware — grounded in your repo's module structure
  • AI interpretation, distinct from computed graph facts
  • Understands import chains and blast radius
  • Suggested prompts based on analysis results
  • Access and AI limits depend on your plan
PR Impact Analysis

Review the structural context of a pull request.

Inspect changed files and their import dependents. This is potential structural impact, not a prediction of runtime failures.

  • Changed and potentially affected files
  • Visual diff overlay on the dependency map
  • Helps code reviewers prioritize what to test
  • GitHub App workflows where installed and enabled
VS Code Extension — Unreleased

Editor workflows alongside the workspace.

The editor extension is unreleased. Existing extension source is not a promise of an available installation; use the browser workspace today.

  • One-click project scan from the command palette
  • Inline security warnings as diagnostics
  • AI Mentor chat panel inside the editor
  • Learning path generator for onboarding
  • Check installation requirements in the documentation
Private & Secure

Understand how your code is processed.

Repository analysis uses a temporary server-side clone. Cleanup is attempted after analysis; saved reports exclude source snippets.

Temporary Clone

Cleanup attempted after analysis

Repository Access

Private code requires authorized access

Saved Metadata

Signed-in history excludes source snippets

Ready to see your codebase clearly?

Paste a GitHub or GitLab repository URL on the homepage. Sign in to open the workspace and save your analysis history.

AnalyzeView plans