mrkeyoor.com_
Fri 16 Oct 18:51 UTC
Dev Toolsevaluationupdated 11 Oct 2026

repowise review

RepoWise builds a local map of your code's dependencies, change history, documentation, and architectural decisions. Its dashboard, command-line interface, and MCP tools help developers and coding agents find callers, assess changes, and choose maintenance work without rediscovering the repository on every task.

+259 / 4dstars / 7d
Verdict

Our RepoWise run built successfully in 151 seconds, but its workspace tests exited 1 after 210 seconds and npm audit reported 12 high-severity vulnerabilities. Try it when repeated codebase discovery is wasting your team's attention, and keep its change and refactoring recommendations under human review. The npm measurements cover the developer workspaces, so verify the documented Python indexing path separately before adopting it.

We ran it

Lab card: what happened when we ran repowiseScreenshot of repowise (repowise.dev)
Install✓ · 36s1566 packages · 1262 MB
Build✓ · 151s
Tests✗ · 210s191 passed · 0 failed of 191 (vitest)
Known vulns160 critical · 12 high · 2 moderate · 2 low (npm audit)
Repo5747 files~1,161,233 lines of source · 65 MB · 5 CI workflows · tests dir

Answers from our run

Does repowise build from source?

Dependencies installed in 36 seconds (1566 packages), and the build succeeded in 151 seconds. We cloned commit 2a09e79 into a clean Debian container with 3 CPUs and no project-specific setup.

Do repowise's tests pass?

Yes: 191 of 191 passed when we ran the project's own test command (vitest). Some failures need services or credentials a bare container does not have.

Does repowise have known vulnerabilities in its dependencies?

npm audit flagged 16 known advisories in the dependency tree at the time of our run.

Who should not use repowise?

Template-heavy teams requiring a complete dependency map: the language matrix lists Django/Jinja and other template dialects as invisible, plus skipped Svelte and Vue binding forms.

What are the alternatives to repowise?

Serena, Knip, Repomix. Our RepoWise run built successfully in 151 seconds, but its workspace tests exited 1 after 210 seconds and npm audit reported 12 high-severity vulnerabilities.

Setup3/5Keyless user path; measured npm setup uses 1,262 MB
Docs4/5Explicit setup flags, data flows, and language ceilings
Community4/5October push, recent release, and current issue and PR activity
Maturity3/5Build passed; workspace tests failed and audit found high advisories

Discussed on

  1. hnRepowise: Codebase intelligence for AI-assisted engineering teams4 points
  2. hnOpen source second brain for live meetings hidden from screenshare4 points

Who it’s for

Teams whose coding agents repeatedly search the same repository for callers and architectural context.
Maintainers who want git history, code health, and change-impact evidence in one local index.
Claude Code and other MCP users willing to check indexed recommendations against their own code and coverage reports.

Who it’s NOT for

Template-heavy teams requiring a complete dependency map: the language matrix lists Django/Jinja and other template dialects as invisible, plus skipped Svelte and Vue binding forms.
Teams treating inferred test reachability as proof of executed coverage: RepoWise labels graph-based answers as inferred and requires a coverage report for measured evidence.
Organizations requiring audited SOC 2 or ISO 27001 certification before adoption: the README explicitly says RepoWise holds neither today.
Developers expecting initialization to leave their editor and git hooks untouched: the quickstart documents configuration and hook writes unless editor setup is disabled.

Setup reality

Our sandbox installed commit 2a09e79's npm workspaces in 36 seconds, adding 1,566 packages and using 1,262 MB. Build passed in 151 seconds. Tests exited 1 after 210 seconds: the tail shows 5000ms timeouts and a failing Fix first component test despite separate passing workspace summaries. Npm audit reported 16 vulnerabilities: 12 high, 2 moderate, 2 low, and 0 critical.

The documented user setup needs Python 3.11 or newer and Git, with SQLite as the default local database. repowise init --yes --no-prose needs no model key. Optional generated prose needs your provider credentials or a local runtime. The npm results do not verify that Python indexing path.

Initialization writes editor settings and hooks unless --no-editor-setup is used. Telemetry is opt-out. Our Debian lab-node:22 container had 3 CPUs and 8 GB of RAM, without secrets or privileges. The scan found 5 CI workflow files, a tests directory, workspace configuration, and no Dockerfile.

A local index gives agents callers and change history

Before accepting a change to an unfamiliar function, ask RepoWise for its callers and the files that historically change alongside it. The project combines a dependency graph with git history, documentation, and architectural decisions, then exposes that index through a dashboard, CLI, and MCP tools. The caller map gives you a reason to inspect code outside the immediate edit.

Our checkout contained 5,747 files and occupied 65 MB before installation. The product spans code-health scoring, dead-code detection, and multi-repository analysis, with Claude Code integration as well as other agent clients. You should want several of those jobs before adopting the whole stack. If all you need is a repository text bundle or unused-export report, a narrower tool leaves you with fewer moving parts to understand.

What happened when we ran it

Our sandbox installed RepoWise's npm workspaces in 36 seconds, adding 1,566 packages and occupying 1,262 MB on disk. The build succeeded in 151 seconds. We ran commit 2a09e79 on October 11, 2026, in a fresh Debian lab-node:22 container with 3 CPUs and 8 GB of RAM, without secrets or elevated privileges. The run didn't measure indexing accuracy or agent savings.

The test command exited 1 after 210 seconds. Its tail reports timeouts at 5000ms and a workspace summary with 2 failed tests and 2,357 passed. Another reports 1 failed test and 164 passed, naming fix-first-section.test.tsx. The supplied headline's 191 passed and 0 failed is a separate passing summary, not the whole command's result. The tail doesn't explain the component assertion failure or why the timeouts occurred. We cannot responsibly supply those causes.

The documented user path starts with Python

RepoWise's quickstart requires Python 3.11 or newer and Git, then uses repowise init --yes --no-prose to create the local index. Our npm build covers the repository's JavaScript workspaces, including its web and editor surfaces. It doesn't establish that the Python indexing workflow completed. The manual quickstart is the better place to assess the actual user path.

The measured 1,262 MB footprint belongs to that npm developer setup, so don't budget it as a measured Python package footprint. SQLite is the default local database, and deterministic indexing needs no model credential. Optional model-written documentation needs your chosen provider or a local runtime. Setup also writes editor configuration and hooks unless you pass --no-editor-setup. Read that switch before trying it in a repository with carefully maintained agent configuration.

The audit found high advisories, and telemetry needs a separate decision

Npm audit reported 16 known vulnerabilities in our run: 12 high, 2 moderate, 2 low, and 0 critical. The supplied findings don't identify packages or reachable code paths, so they don't establish a remotely exploitable server flaw. They do warrant inspecting the dependency advisories before using this checkout for a shared service or development base. A successful build gives no reason to wave those findings away.

Neither the 36-second installation nor the 151-second build checked privacy behavior. The README says anonymous CLI usage telemetry is enabled with an opt-out, while optional model features send code-derived prompts to your configured provider. DO_NOT_TRACK=1 or repowise telemetry disable handles the telemetry choice. For offline work, the documentation describes Ollama with local embeddings. The security and data-flow guide distinguishes stored index artifacts from transiently processed source.

Graph reachability is useful evidence with explicit gaps

RepoWise labels test reachability from its graph as inferred, while ingested coverage reports provide measured execution evidence. That's a useful distinction: a possible route from a test to a function doesn't tell you which lines actually ran. An empty recommendation can mean unknown. I would use this to prioritize inspection and select candidate checks, while keeping measured coverage and the project's own release checks. The test-intelligence guide spells out that boundary.

Our run's 3 CPUs and 8 GB of RAM provide context for the workspace results, not proof that RepoWise can resolve your application's dispatch paths. Its language matrix lists concrete gaps: Django/Jinja and other template dialects yield no parsed content, Razor lacks import edges, and some Svelte and Vue bindings are skipped. Those omissions matter if a call map is supposed to justify deleting code or changing a template-heavy application. The language ceilings deserve a read before adoption.

October maintenance includes fixes to refactoring inputs

The last push was October 11, 2026, and GitHub reported 7,494 stars with 300 open issues and PRs. Release v0.55.0 was published October 4. Recent activity includes issue 3396, which reports an Extract Method plan omitting an exception binding from helper inputs. That is directly relevant to code-changing recommendations. Active maintenance is welcome, but a proposed refactor still needs review of the values its extracted helper reads. The exception-binding report gives a concrete example.

Our scan found 5 CI workflow files and a tests directory, yet the workspace command still returned exit 1. That combination suggests taking upstream checks seriously without treating their presence as a guarantee. I'd rate RepoWise as worth a controlled trial for a team drowning in repeated codebase discovery, with lower confidence in unattended use. Keep recommendations advisory until you've compared its graph and suggested edits with code your team already understands.

Pick Serena for editing, Knip for unused code

Serena is the closer alternative when your agent primarily needs semantic code retrieval and editing tools. Knip concentrates on unused files, exports, and dependencies in JavaScript and TypeScript projects. Repomix packages repository content for model consumption when a text bundle is enough. Each solves a narrower job than RepoWise's combined history and health index.

The 1,566-package npm setup and failed workspace suite make maintaining RepoWise's source a deliberate choice. For an adoption trial, pick a backend change whose callers you already know, ask the index what it reaches, and inspect every missing or surprising edge. Then check the recommended tests against your own coverage report. That comparison will tell you more about whether to trust it in your repository than the README's headline savings.

Alternatives

ProjectWhat it isPick it when
Serena gh↗MCP tools for semantic code retrieval and editing.pick this instead when symbol navigation and agent-driven editing are the main requirement.
KnipFinds unused files, exports, and dependencies in JavaScript and TypeScript.pick this instead when unused-code cleanup is the job and you do not need a git-history or architectural-decision index.
Repomix gh↗Packs repository content into a file for language-model consumption.pick this instead when you need a shareable code bundle rather than a maintained graph and change-risk service.

What people are saying

  1. [github-trending] repowise-dev/repowise

Sources

  1. RepoWise README, features, privacy, and certification status
  2. Manual setup, requirements, and editor configuration writes
  3. Npm workspace scripts at the measured commit
  4. Local database and optional provider configuration
  5. Security and data-flow review guide
  6. Measured coverage versus inferred test reachability
  7. Supported languages and known parsing ceilings
  8. Extract Method exception-binding issue

More dev tools reviews

compose-samples · librepods · sqlmap · coucou · world-execute-me-dsh-pv · mcp-extensions · the whole board →