Back to Home

Product & Docs

Explore every feature, learn the CLI commands, and understand the full analysis pipeline — all in one place.

Features

Everything you need to understand your code

From 3D architecture visualization to AI-powered insights — all from a single CLI command.

3D Architecture Map

Explore your entire codebase in an interactive, force-directed 3D graph. Each node is a file — shaped and colored by type.

Dependency Graph

AST-based import scanning detects used, unused, and outdated packages automatically.

Security Scanning

npm audit + AST-level code analysis for eval(), innerHTML, hardcoded secrets, and more.

Performance Analysis

Bundle size, load time estimation, large file detection, and heavy dependency flagging with recommendations.

AI Insights

AI-powered analysis detects anti-patterns and provides actionable architectural recommendations.

Health Score

Unified 0–100 score based on modularity, coupling, vulnerabilities, and Git volatility.

Real-Time Sync

Live dashboard updates via SSE — zero manual refresh after CLI analysis.

Git Hotspots

Identifies the most frequently changed files that may need refactoring or better test coverage.

CLI Tool

Power in your terminal

Moduly's CLI is built with Commander.js and uses Babel AST parsing under the hood. One command scans your entire project and generates a comprehensive analysis report.

npm i -g moduly-cli

Commands

$moduly analyze

Scans the entire project: files, LOC, imports, dependencies, security, and performance. Generates an interactive HTML dashboard at .moduly/index.html.

--open—Launch the HTML dashboard in your browser
--report—Save report.json and push to live dashboard
$moduly ai <on|off>

Toggles AI-assisted commit detection. When enabled, Moduly uses machine learning to identify semantically significant commits and hotspot patterns.

Under the Hood

7 specialized analyzer modules that work together.

Project Scanner

Walks the file tree, builds stats, orchestrates all sub-analyzers

analyzer/project.ts

LOC Analyzer

Counts code, comment, and blank lines per file with language-aware parsing

analyzer/loc.ts

Dependency Analyzer

AST-based import/export detection, builds file-to-file dependency graph

analyzer/dependencies.ts

Package Analyzer

Detects used vs unused packages, checks npm for outdated versions

analyzer/dependencies.ts

Security Scanner

npm audit + 6 AST code patterns (eval, exec, innerHTML, secrets)

analyzer/security.ts

Performance Profiler

Bundle size estimation, large file detection, heavy dependency flagging

analyzer/performance.ts

Git Hotspot Engine

Parses git log --name-only to rank files by commit frequency

analyzer/git.ts

Output Format

Running moduly analyze --report generates a structured JSON report.

.moduly/report.json
{
  "projectName": "my-app",
  "timestamp": "2026-02-23T18:00:00.000Z",
  "score": 87,
  "stats": {
    "totalFiles": 42,
    "totalLOC": 12450,
    "languages": { ".ts": 28, ".tsx": 10, ".js": 4 },
    "fileList": [...]
  },
  "hotspots": [
    { "file": "src/core/engine.ts", "commits": 24 }
  ],
  "dependencies": {
    "nodes": [...],
    "links": [...]
  },
  "packageDependencies": {
    "used": [...], "unused": [...],
    "outdated": [...], "suggestions": [...]
  },
  "security": [...],
  "performance": {
    "bundleSize": "1.2MB",
    "largeFiles": [...],
    "heavyDependencies": [...]
  }
}
Documentation

Complete reference

Everything you need to get started, configure the analyzer, and understand the output.

Quick Start

1

Install globally

npm i -g moduly-cli

One command, zero config — installs everywhere.

2

Navigate to project

cd my-project

Point to any JavaScript or TypeScript codebase.

3

Run analysis

moduly analyze --report

Scans files, deps, security, and performance.

4

Open dashboard

moduly-zeta.vercel.app/dashboard

Report syncs live to the visual dashboard.

Configuration

Zero-config by default. These behaviors are automatic.

Ignored Dirs
Auto
node_modules, dist, .git, .moduly, .next, build, coverage
Languages
Auto
.ts, .tsx, .js, .jsx, .mjs, .cjs, .json, .css, .scss, .html
Git Integration
Auto
Reads git log for hotspot analysis. Requires git.
AI Mode
Persistent
Enable/disable AI commit detection via moduly ai on|off
Dashboard Sync
API
Auto-pushes report to moduly-zeta.vercel.app with --report flag

Security Scan Patterns

AST-based code scanner checks for these dangerous patterns.

eval()Code Injection
critical
new Function()Code Injection
high
child_process.exec()Command Injection
high
innerHTMLXSS
medium
dangerouslySetInnerHTMLXSS
medium
document.write()XSS
medium
Hardcoded secretsSensitive Data
high

Health Score

Starts at 100 — penalties deducted per factor.

Deduction // GLOBAL

Large codebase (>200 files)

-10

Deduction // GLOBAL

High LOC (>10,000 lines)

-10

Deduction // GLOBAL

Active hotspots (>10 commits)

-3

Deduction // GLOBAL

High coupling ratio (>3x)

-20

Deduction // MAX 15

Unused dependencies

-2

Deduction // GLOBAL

Critical vulnerabilities

-10

Deduction // GLOBAL

High vulnerabilities

-5

Deduction // GLOBAL

Low comment ratio (<5%)

-5

Deduction // GLOBAL

Large codebase (>200 files)

-10

Deduction // GLOBAL

High LOC (>10,000 lines)

-10

Deduction // GLOBAL

Active hotspots (>10 commits)

-3

Deduction // GLOBAL

High coupling ratio (>3x)

-20

Deduction // MAX 15

Unused dependencies

-2

Deduction // GLOBAL

Critical vulnerabilities

-10

Deduction // GLOBAL

High vulnerabilities

-5

Deduction // GLOBAL

Low comment ratio (<5%)

-5

Ready to analyze?

Install the CLI, run your first analysis, and see your architecture come alive.