← Ripplex

One PR. Four scanners. One comment.

Every pull request triggers a ripple. Ripplex clones your repo, runs four scanners in parallel, then collapses everything into one ranked comment before your reviewer opens the diff.

The flow

01
PR opened
You open or update a pull request.
02
Ripplex clones your repo
A shallow clone takes 3--œ5 seconds. Nothing is stored after the scan.
03
Four scanners run in parallel
semgrep, oxlint, jscpd, and knip run simultaneously.
04
Results are ranked by severity
Critical issues first, warnings below, duplicates last.
05
One comment posted
A single ranked comment appears before your first reviewer.

The scanners

semgrepSecurity

Security vulnerabilities, SQL injection, XSS, hardcoded secrets

oxlintCode quality

Unused variables, bad patterns, type errors

jscpdDuplicates

Duplicate code blocks across your entire codebase

knipDead code

Dead exports, unused files, functions nobody calls

Why one comment

Four tools usually means four separate CI jobs, four logs to dig through, and four different formats to read. Ripplex de-duplicates overlapping findings, ranks what's left by severity, and posts one clean comment. Your reviewer sees what matters, in order.

Scans run in an isolated sandbox. Your code is never stored and never used to train anything.

Get early access →