Github Repository Analyzer

Comprehensive GitHub repository analysis with security scanning, code quality metrics, contributor bus factor, dependency audit, license compatibility, trends analysis, and AI-powered insights.

Perfect for technical due diligence, hiring decisions, and open source evaluation.

✨ Features

Core Analysis

• Basic Info: Stars, forks, license, topics, archive status
• Tech Stack: Languages, frameworks, build tools, package managers
• Contributors: Bus factor, contribution distribution (Gini coefficient), top contributors
• Dependencies: Package count, lock file detection, transitive dependencies
• Activity: Commit frequency, staleness score, release history
• Quality: Tests, CI/CD, linting, documentation scores

Extended Analysis

• Security: Dependabot alerts, code scanning, secret scanning, security advisories
• Code Quality: Coverage integration (Codecov, Coveralls), complexity estimates
• Issues & PRs: Resolution time, merge velocity, stale issue count
• Trends: Star history, fork patterns, commit activity, momentum score
• Branches: Protection rules, branching strategy detection
• Monorepo: Lerna, Turborepo, Nx, workspaces detection
• License Compatibility: GPL/MIT/Apache/LGPL conflict detection
• AI Insights: Executive summary, strengths, concerns, risk assessment

🆕 New Features

📊 Repository Comparison

Compare multiple repositories side-by-side with automated winner detection:

{
  "repositories": ["facebook/react", "vuejs/vue", "sveltejs/svelte"],
  "compareMode": true
}

🏷️ Badge Generation

Get embeddable shields.io-style badges for your README:

• Quality Score badge
• Bus Factor badge
• Security Score badge
• Activity/Staleness badge
• Coverage badge
• Overall Health Grade (A+ to F)

📈 Historical Tracking

Track metrics over time with automatic trend detection:

• Quality score trends
• Security score changes
• Bus factor evolution
• Activity patterns
• Degradation alerts

🔔 Webhook Monitoring

Get notified when metrics cross thresholds:

• Slack integration
• Discord integration
• Generic JSON webhooks
• Customizable alert thresholds

🤖 MCP Server

Model Context Protocol integration for AI assistants (Claude, Cursor, etc.):

• analyze_repository - Full repository analysis
• compare_repositories - Side-by-side comparison
• get_security_report - Security vulnerability scan
• get_issue_analytics - Issue/PR metrics
• get_trends - Historical trend data
• get_branch_analysis - Branch and protection rules
• get_code_quality - Quality metrics
• check_monorepo - Monorepo structure detection
• check_license_compatibility - License conflict detection

🚀 Quick Start

Basic Analysis

{
  "repositories": ["facebook/react"],
  "analysisDepth": "deep"
}

Compare Frameworks

{
  "repositories": [
    "vercel/next.js",
    "facebook/react",
    "vuejs/vue",
    "sveltejs/svelte"
  ],
  "compareMode": true,
  "analysisDepth": "standard"
}

Security Audit with Alerts

{
  "repositories": ["your-org/main-app"],
  "analysisDepth": "deep",
  "githubToken": "ghp_xxxxxxxxxxxx",
  "webhookUrl": "https://hooks.slack.com/services/xxx",
  "webhookFormat": "slack",
  "alertThresholds": {
    "securityScore": { "warning": 80, "critical": 60 },
    "criticalVulns": { "warning": 0, "critical": 1 }
  }
}

Scheduled Monitoring

Set up a scheduled run to monitor your dependencies:

{
  "repositories": [
    "your-org/frontend",
    "your-org/backend",
    "your-org/shared-lib"
  ],
  "trackHistory": true,
  "webhookUrl": "https://discord.com/api/webhooks/xxx",
  "webhookFormat": "discord"
}

📋 Input Parameters

Parameter	Type	Required	Description
repositories	array	Yes	Repository URLs or owner/repo format
analysisDepth	string	No	quick, standard, or deep (default: deep)
compareMode	boolean	No	Generate comparison for multiple repos
generateBadgesOutput	boolean	No	Create embeddable badges (default: true)
trackHistory	boolean	No	Save results for trend tracking (default: true)
webhookUrl	string	No	URL for alert notifications
webhookFormat	string	No	json, slack, or discord
alertThresholds	object	No	Custom thresholds for alerts
alwaysNotify	boolean	No	Send webhook on every run
includeAiSummary	boolean	No	Generate AI insights (default: true)
openaiApiKey	string	No	Required for AI summaries
githubToken	string	No	For higher rate limits and security data
maxConcurrency	integer	No	Parallel repos (default: 3, max: 10)

📤 Output

Dataset (per repository)

Full analysis results with all metrics, badges, and alerts.

Key-Value Store

Key	Description
SUMMARY	Run summary with all repo scores
COMPARISON	Side-by-side comparison (if compareMode=true)
BADGES	All generated badges for easy access
HISTORY_owner_repo	Historical data for each repository

Example Output

{
  "repositoryUrl": "https://github.com/facebook/react",
  "owner": "facebook",
  "name": "react",
  "basicInfo": {
    "stars": 220000,
    "forks": 45000,
    "license": "MIT"
  },
  "quality": {
    "overallScore": 95
  },
  "security": {
    "securityScore": 85,
    "vulnerabilities": { "critical": 0, "high": 1 }
  },
  "contributors": {
    "busFactor": 12,
    "total": 1600
  },
  "badges": {
    "qualityScore": {
      "markdown": "![Quality Score](https://img.shields.io/badge/quality-95%2F100-brightgreen)",
      "svg": "..."
    },
    "health": {
      "markdown": "![Health](https://img.shields.io/badge/health-A-brightgreen)"
    }
  },
  "alerts": [],
  "aiInsights": {
    "summary": "React is a mature, actively maintained UI library...",
    "maintenanceRisk": "low"
  }
}

📊 Key Metrics Explained

Bus Factor

Minimum contributors responsible for 50% of commits. Low values (1-2) indicate risk.

Staleness Score (0-100)

• 0-10: Active (< 30 days)
• 10-50: Moderate (30-180 days)
• 50-80: Stale (6-12 months)
• 80-100: Abandoned (> 1 year)

Quality Score (0-100)

Composite of: README (30%), Tests (20%), CI/CD (15%), Linting (10%), TypeScript (10%), Docs (15%)

Security Score (0-100)

Based on: No critical vulns (+40), Security policy (+15), Dependabot (+15), Code scanning (+15), Secret scanning (+15)

🔧 MCP Server Setup

Add to your Claude/Cursor configuration:

{
  "mcpServers": {
    "github-analyzer": {
      "command": "npx",
      "args": ["-y", "github-repository-analyzer", "--mcp"],
      "env": {
        "GITHUB_TOKEN": "ghp_xxx",
        "OPENAI_API_KEY": "sk-xxx"
      }
    }
  }
}

Or run locally:

$npm run mcp

💰 Pricing

Pay per result:

• $0.03 per repository (quick)
• $0.05 per repository (standard)
• $0.10 per repository (deep)

Plus OpenAI API costs if using AI summary (~$0.01-0.02 per repo).

⚡ Rate Limits

Token	Rate	Repos/hour
None	60/hour	~5-7
GitHub PAT	5000/hour	~400+

Get a token: https://github.com/settings/tokens

Required scopes: repo (private repos), security_events (security data)

📝 Changelog

v1.2.0

• Added repository comparison mode with winner detection
• Added embeddable badge generation (shields.io style)
• Added historical tracking with trend analysis
• Added webhook notifications (Slack, Discord, JSON)
• Added customizable alert thresholds
• Added degradation detection

v1.1.0

• Added security vulnerability scanning
• Added code quality metrics with coverage
• Added issue/PR analytics
• Added license compatibility analysis
• Added monorepo detection
• Added MCP server for AI assistants

🆘 Support

For issues or feature requests, please open an issue on the actor's GitHub repository or contact us through Apify.

---

Built for developers who need to make informed decisions about open source dependencies.