Codacy
SonarQube
CodeClimate
CodeFactor.io
ESLint
Coveralls
SensioLabs Insight
codebeat
CodeRifts
Bump.sh
StopLight
Spectral
Insomnia CLI
Merge Freeze
Optic
Codacy automates code reviews and monitors code quality on every commit and pull request reporting back the impact of every commit or pull request, issues concerning code style, best practices, security, and many others. It monitors changes in code coverage, code duplication and code complexity. Saving developers time in code reviews thus efficiently tackling technical debt. JavaScript, Java, Ruby, Scala, PHP, Python, CoffeeScript and CSS are currently supported. Codacy is static analysis without the hassle.
CodeRifts detects breaking changes in OpenAPI schemas on every pull request. It scores risk across 4 dimensions (revenue impact, blast radius, app compatibility, security), enforces governance policies before merge, and translates technical API changes into business impact — blast radius, affected clients, and estimated cost.
Works with GitHub, GitLab, Bitbucket, and any CI/CD pipeline. Zero config. Free to start.
Key features: - Breaking change detection with risk scoring (0-100) - Policy engine: breaking budgets, freeze windows, approval matrix - Economic impact estimation: cost and engineering effort - Security analysis: auth changes, sensitive field exposure - Auto-changelog and semver suggestions - GitHub App, GitHub Actions, GitLab CI, Bitbucket Pipelines, REST API, CLI
Codacy CodeRiftsNo CodeRifts videos yet. You could help us improve this page by suggesting one.
CodeRifts's answer:
Currently in beta, onboarding early adopters
CodeRifts's answer:
CodeRifts is the only API governance tool that combines breaking change detection with risk scoring, policy enforcement, and economic impact estimation — all delivered as a zero-config GitHub App. It does not just tell you what changed, it tells you how dangerous it is, who it affects, and what it will cost to fix.
CodeRifts's answer:
A field rename broke a POS system across 19 restaurants for a week. The PR passed code review, all tests were green, nobody checked the API schema. CodeRifts was built to catch this class of problem before merge — automatically, on every pull request.
CodeRifts's answer:
Most tools only diff your OpenAPI specs. CodeRifts goes further: it scores risk across 4 dimensions, enforces governance policies before merge, estimates migration costs in dollars and engineering hours, and works with GitHub, GitLab, Bitbucket, and any CI/CD pipeline. One YAML file replaces review meetings.
CodeRifts's answer:
Senior backend engineers, platform engineers, and staff engineers at companies with microservices architectures who need to prevent breaking API changes from reaching production.
CodeRifts's answer:
Node.js, Express, GitHub Apps API, OpenAPI diff engine, Railway, Cloudflare Pages
Based on our record, Codacy seems to be more popular. It has been mentiond 4 times since March 2021. We are tracking product recommendations and mentions on various public social media platforms and blogs. They can help you identify which product is more popular and what people think of it.
I'm trying to use Codacy to review my code. One of the issues is regarding the use of the "setcookie" function. Source: almost 5 years ago
Does anyone have an example on how to get this conversion done on github actions where I can convert the *.coverage file into a *.xml file for uploading to codacy.com. Source: about 5 years ago
Online analysisFinally, if you want a simple way to analyze your code without having to manually configure everything locally, you can use an online code review service such as Codacy (shameless plug here). We already integrate some of the mentioned detection tools in this article and we are working every day to improve the service. The other main benefit of using automated code review tools is to allow you to... - Source: dev.to / over 5 years ago
Because you care and because you always want to be better, automation is a great way to optimize your review workflow process. Go ahead and do a quick search on Google for automated code reviews and see who better fits your workflow. You'll find Codacy on your Google search and we hope you like what we do. - Source: dev.to / over 5 years ago
SonarQube - SonarQube, a core component of the Sonar solution, is an open source, self-managed tool that systematically helps developers and organizations deliver Clean Code.
Bump.sh - Much more than stunning docs. For all your APIs.
CodeClimate - Code Climate provides automated code review for your apps, letting you fix quality and security issues before they hit production. We check every commit, branch and pull request for changes in quality and potential vulnerabilities.
StopLight - Stoplight is an API Design, Development, and Documentation platform that enables consistency, reusability, and quality in your API lifecycle, all with an easy, enjoyable developer experience.
CodeFactor.io - Automated Code Review for GitHub & BitBucket
Spectral - Spectral is an experimental Sinclair ZX Spectrum emulator from the 80s, which has been randomly assembled since the pandemic days. Accuracy and performance are long-term goals, but the primary focus is just having fun with this thing.