测试与安全

fallow

fallow-rs/fallow-skills

Codebase intelligence for TypeScript and JavaScript. Static analysis reports changed-code risk, cleanup opportunities, duplication, circular dependencies, complexity hotspots, architecture boundaries, design-system drift, feature flags, and opt-in security candidates. Optional local similar-code discovery finds functions that may implement the same intent despite different syntax. Runtime coverage can merge production execution data. Use when asked to audit PR risk, find unused code or dependencies, compare semantically similar functions, detect duplicates, inspect architecture boundaries, merge runtime coverage, auto-fix supported issues, or run fallow.

  • 9804 次安装
  • 137 星标
  • 收录于

安装命令

npx skills add https://github.com/fallow-rs/fallow-skills --skill fallow

SKILL.md

Fallow: codebase intelligence for TypeScript and JavaScript

Fallow analyzes code and styles for changed-code risk, cleanup opportunities, circular dependencies, duplication, complexity hotspots, architecture boundary violations, design-system styling drift, feature flags, and opt-in security candidates. Runtime coverage merges production execution data into the same fallow health report for hot-path review and cold-path deletion confidence. A single local capture is available by default. Continuous or cloud runtime monitoring is optional.

When to Use

  • Find cleanup opportunities: unused files, exports, types, members, dependencies, or feature flags that guard unused exports.
  • Detect code duplication, circular dependencies, architecture boundary issues, and complexity hotspots.
  • Find functions that may implement the same intent despite different names, syntax, or control flow (fallow similar-code).
  • Check styling consistency, CSS dead surface, and design-token drift.
  • Audit changed code before a commit, PR, release, or refactor.
  • Set up CI quality gates, duplication thresholds, and regression baselines.
  • Auto-fix supported unused exports and dependencies after --dry-run.
  • Investigate why a specific export, dependency, file, or issue type was reported.
  • Surface local security candidates for an agent to verify (fallow security).
  • Find untested but runtime-reachable code (fallow health --coverage-gaps).
  • Rank complexity hotspots, owners, and refactoring targets (fallow health --hotspots --ownership --targets).
  • Review what fallow has surfaced over time (fallow impact).
  • Confirm exact TypeScript symbol use, affected tests, API leaks, or public type coupling when syntactic evidence is insufficient (--type-aware).