TraceOn

The problem: Every change to unfamiliar code starts with the same questions. Where do I start? What will this break? Is this even tested? Today the answers come from reading code by hand, asking colleagues who may have left, or finding out in production. The problem is growing: AI assistants and larger teams produce code faster than people can review it, knowledge leaves when people move on, and teams release several times a week. Our solution: Traceon is a web app that reads a GitHub repository and explains it. Users click "Continue with GitHub", approve read-only access on GitHub's own page, pick a repository and click Analyze. Traceon downloads one snapshot of the code and runs a static analysis without ever executing it. Progress streams live, and the results fill nine views built from a single Project Model: - Overview: health score, issues and next actions - Project Map: modules and their dependencies, built from real import statements - Onboarding: entry points, API routes, setup commands and a first-day guide - Maintenance: risky dependency versions, undocumented environment variables, Docker and CI problems - Testing: which files tests actually reach, module by module, and the critical gaps - Generate Test: starter tests built from each file's real exports - Change Impact: what depends on a module, which endpoints are affected and which tests to run - Release: a readiness check across tests, CI and deployment - Reports: shareable health, release and maintenance reports Target users: new developers joining a team, tech leads who need risks and test gaps at a glance, release owners deciding whether to ship, and open-source maintainers helping contributors find their way. What makes it creative and unique: Linters, code search and coverage tools each answer one question in isolation. Traceon connects them into one picture of how a codebase fits together and what a change will touch. It does real analysis, not guesses from file names: it parses imports in JavaScript, TypeScript, Python and Go, finds routes in more than ten web frameworks, follows test imports, and reads manifests in eight ecosystems, from npm to .NET. It needs no setup: no CI changes, no agent to install and nothing added to the repository. Why it is effective, efficient and safe: A repository is analysed in about a minute from a single download, so the answers are available before the change is made. Because customers hand over source code, trust is built in. Access is read-only at the permission level, sign-in uses standard GitHub OAuth with PKCE, tokens stay on the server and are revoked on sign-out, and real secret files are never read. Traceon is live at traceon-production.up.railway.app, with 21 automated server tests and a 23-step browser test that also check that hostile repository content cannot run and that Traceon never writes to GitHub.