Observed arrival · 2026-09-14
Repyy reads a repository before you run it
An open-source repository preflight tool that inspects unfamiliar code, scripts, dependencies, and configuration without intentionally installing or executing the project.
Field notes
Repyy takes a local folder or Git URL and examines repository surfaces before the target project is installed or run. Its stated scope extends beyond application source to lifecycle scripts, GitHub Actions, editor tasks, Git hooks, agent instructions, containers, archives, and social-engineering signals. The example report flags a postinstall chain that downloads and executes a shell script, while the finding model keeps severity separate from confidence and redacts credential-shaped values.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
One card from the complete issue