PRScope

PRScope is a developer tool that assists with reviewing code changes. It provides automated analysis of pull requests using deterministic code analysis and language models to help developers identify potential issues before merging code. Features: Code Review Generation: Reads pull request diffs and generates summaries and inline comment suggestions. Risk Assessment: Calculates a risk score and reviewability index using deterministic metrics, including cyclomatic complexity computed from a real control-flow graph, not just line counts. Security Scanning: Scans added code for common vulnerability patterns such as hardcoded credentials, unsafe deserialization, and command injection, using the Bandit static analysis engine for Python and pattern-based detection for other languages. Architecture Analysis: Highlights potential structural code issues and supports custom, repository-specific architecture rules. Interactive Dependency Graph: Generates a visual node-graph of modified functions to help visualize the blast radius and downstream impact of code changes, for Python and JavaScript/TypeScript. An optional, user-triggered full-repository index extends this beyond the current pull request to surface callers anywhere in the repository. Historical Incident Matching: Compares the pull request against a reference set of real, publicly documented software incidents, and lets teams add their own past incidents so future reviews can be matched against them too. Personal API Key Integration (OpenAI / Google Gemini / Groq): Users can provide their own API key for the language model to generate reviews. Saved Reviews: Users can authenticate to save their review history. An optional "Team Reviews" view lets other users see shared review history for a repository, gated on providing a GitHub Personal Access Token that is verified against that repository. Github Comments: Users can provide a GitHub Personal Access Token to post the AI-generated comment suggestions directly to the Pull Request timeline right from the extension. GitHub Status Checks: Users can publish the risk assessment as a commit status, visible directly in the pull request's GitHub Checks section, using the same GitHub Personal Access Token. Jira Ticket Recognition: Detects Jira-style ticket IDs (e.g., PROJ-123) in the PR title or description and generates an AI-estimated alignment summary. Does not connect to a live Jira instance or verify against real ticket data. Copy Snapshot: Copy a formatted review summary to your clipboard for pasting into GitHub. PRScope injects a sidebar on click, directly into the pull request interface for easy access to the analysis tools. It is designed to reduce the time spent manually reviewing large code modifications.