Maps repository ownership and identifies security risks by analyzing git history and file co-change patterns.
This skill enables deep analysis of git repositories to visualize the relationship between developers and sensitive codebases. By building a bipartite graph of contributors and files, it computes critical metrics like the 'bus factor' to help security teams and engineering leads identify orphaned sensitive code, detect hidden ownership clusters, and mitigate the risk of knowledge silos. It exports actionable data for graph databases like Neo4j, making it an essential tool for maintaining repository health, security compliance, and organizational resilience.
主な機能
01Co-change file clustering using Jaccard similarity to discover functional dependencies
02Automated detection of orphaned or stale sensitive code like auth and crypto modules
03Export-ready artifacts for Neo4j and Gephi visualization and advanced querying
040 GitHub stars
05Bipartite graph mapping of contributors to specific files based on git history
06Bus factor computation to identify high-risk, single-maintainer sensitive components
ユースケース
01Performing security audits to ensure critical authentication modules are not maintained by a single person
02Identifying 'hidden owners' who control a disproportionate amount of sensitive infrastructure
03Validating CODEOWNERS files against actual historical contribution data to detect ownership drift
