🎯 The Problem

In 2026, developers write 78% of their code with AI help (Copilot, Cursor, ChatGPT, Claude). The result?

• 😰 "Understanding Debt" — Code is committed, but no one actually knows how it works
• 🚌 Bus Factor = 1 — Everyone uses the same AI, no one understands the codebase
• 💰 Technical Debt Explosion — Without human review, AI-generated code decays fast
• 🐛 Bug Multiplication — 3 months later: "Who wrote this? I don't even know what it does"

CodeDNA solves this. Every commit is scored. Every developer is measured. Every team gets visibility.

✨ Features

🔍 AI Detection (4-metric fingerprint)

CodeDNA uses 4 heuristics to detect AI-generated code:

Total > 0.50 → AI suspected. Combined with Tree-sitter AST analysis, this gives 80%+ accuracy.

👤 Developer Understanding Score

• Interview-based — Structured Q&A after each commit
• AI-powered — Generates questions about the code you just committed
• Tracked over time — See your understanding curve

🚌 Bus Factor Analysis

• Ownership tracking — Who owns which file?
• Risk identification — Single points of failure
• Refactoring suggestions — "Pair X with Y on module Z"

💰 Technical Debt Estimation

• Cost in USD — How much would it cost to fix this?
• Trend over time — Is debt increasing?
• Prioritization — What to fix first?

🏃 Sprint Health

• Velocity tracking — Real commits vs. AI-assisted
• Code review load — Who reviews what?
• Quality metrics — Per-sprint scoring

🤖 AI Tool Comparison (Enterprise)

• Copilot vs. Cursor vs. ChatGPT — Which tool produces more debt?
• Per-developer breakdown — Who uses what?
• Productivity vs. quality — Real metrics

🎯 Interview Tool (Enterprise)

• Auto-generates questions — "What does this function do? Why?"
• Records responses — For HR and compliance
• Exportable reports — PDF/CSV

🚀 Developer Onboarding

• Ramp-up curve — How long to productivity?
• Mentor matching — AI suggests pairs
• First PR analysis — What did they ship?

🛡️ Protected Modules

• Mark critical files — "AI may not touch auth/, payment/, security/"
• Pre-commit hook — Blocks AI-generated commits to protected areas
• Override workflow — With approval

📊 Web Dashboard

• Real-time metrics — Live commit feed
• Charts — Time-series, breakdowns, comparisons
• Multi-repo view — All your projects in one place
• Team analytics — Who's growing, who's stagnating

💬 Multi-Channel Support

• Telegram bot — /codedna scan from your phone
• WhatsApp — Slash-prefix commands
• iMessage — Direct Mac integration
• Discord/Slack — Webhook support

🚀 Quick Start

Installation

# PyPI'den
pip install codedna

# Veya uv ile (daha hizli)
uv pip install codedna

# Veya gelistirme ortamindan
git clone https://github.com/natureco-official/codedna.git
cd codedna
pip install -e .

First Use (60 seconds)

# 1. Git repo'ya git
cd your-awesome-project

# 2. CodeDNA'yi baslat (git hook + DB olusturur)
codedna init

# 3. Repoyu tara
codedna scan

# 4. Son commit skorunu gor
codedna status

# 5. Gecmis commit'leri gor
codedna history

That's it. Every commit from now on is auto-analyzed.

Run the Dashboard (optional)

# Web dashboard (port 3000) + REST API (port 8000)
codedna dashboard

# Then open http://localhost:3000
# Login with your account or register new

📋 Commands (25 total)

📊 Analysis & Reporting

codedna init                  # Git hook + DB olustur
codedna scan                  # Repoyu tara
codedna status                # Son commit skoru
codedna history               # Gecmis commit'ler
codedna report                # HTML rapor olustur
codedna ai-compare            # AI arac karsilastirmasi (Enterprise)

🛡️ Protection & Policies

codedna protect-add <path>    # Korunan modul ekle
codedna protect-remove <path> # Korumayi kaldir
codedna protect-list          # Korunan modulleri listele
codedna protect-check <file>  # Dosya korunuyor mu?

👥 Team & Process

codedna onboarding            # Gelistirici ramp-up (Team+)
codedna interview-start       # Mulakat baslat (Enterprise)
codedna interview-list        # Mulakatlari listele
codedna interview-score       # Mulakat skorla
codedna bus-factor            # Sahiplik analizi (Team+)
codedna debt                  # Teknik borc (Team+)
codedna sprint-olustur        # Sprint olustur
codedna sprint-sagligi         # Sprint sagligi
codedna sprint-gecmisi         # Sprint gecmisi

🌐 Infrastructure

codedna serve                 # FastAPI REST (port 8000)
codedna dashboard             # Web dashboard (port 3000)
codedna pr-comment            # GitHub PR yorumu
codedna plan                  # Plan/lisans yonetimi
codedna plan demo pro         # 7 gunluk demo Pro lisans
codedna natureco              # NatureCo CLI entegrasyonu (Pro+)
codedna uninstall             # Hook kaldir

🔧 Utility

codedna doctor                # Sistem saglik kontrolu
codedna reset                 # Sifirla (DANGEROUS)

💎 Pricing

Start with codedna plan demo pro to test Pro features for 7 days.

Payment via Lemon Squeezy — TRY pricing for Turkish market, USD for global.

🔌 Integrations

CI/CD

• GitHub Actions — Auto-comment on PR
• GitLab CI — Pipeline integration
• Bitbucket Pipelines — Snippets

Issue Trackers

• Jira — Story → commit mapping
• Linear — Issue tracking
• GitHub Issues — Auto-link

Notifications

• Slack — Real-time alerts
• Discord — Webhook support
• Telegram — Bot commands
• Email — Daily digest

AI Tools

• GitHub Copilot — Detection
• Cursor — Detection
• ChatGPT/Claude — Detection
• Codeium — Detection

🛠️ Architecture

┌─────────────────────────────────────────────────────────┐
│  CLI (Python 7,000+ LOC)                                │
│  ├── Typer framework                                    │
│  ├── Tree-sitter parsers (Python, JS, TS, JSX, TSX)   │
│  ├── GitPython (commit analysis)                        │
│  ├── SQLite (local DB)                                  │
│  └── JWT (auth)                                         │
└─────────────────────────────────────────────────────────┘
                          │
                          ↓ HTTP
┌─────────────────────────────────────────────────────────┐
│  REST API (FastAPI)                                     │
│  ├── /auth (register, login, me)                        │
│  ├── /billing (checkout, webhook, subscription)        │
│  ├── /commits (list, scores)                            │
│  ├── /files (analysis)                                  │
│  └── /repo (bus-factor, debt, sprint)                   │
└─────────────────────────────────────────────────────────┘
                          │
                          ↓ HTTP
┌─────────────────────────────────────────────────────────┐
│  Web Dashboard (Next.js)                                │
│  ├── /dashboard (metrics)                               │
│  ├── /files (file list)                                 │
│  ├── /commits (commit history)                          │
│  ├── /bus-factor (ownership)                            │
│  ├── /debt (technical debt)                             │
│  ├── /sprints (sprint health)                            │
│  ├── /ai-compare (tool comparison)                       │
│  ├── /onboarding (developer ramp-up)                    │
│  ├── /protected (module list)                           │
│  ├── /interview (Q&A tool)                               │
│  ├── /settings/integrations                              │
│  └── /pricing (plan comparison)                          │
└─────────────────────────────────────────────────────────┘

3-Layer Stack

1. CLI — Terminal-first developers
2. REST API — Backend for dashboard + integrations
3. Web Dashboard — Manager/CTO view

🏗️ Tech Stack

Backend

• Python 3.10+ — Core language
• Typer — Modern CLI framework
• FastAPI — High-performance REST API
• Tree-sitter — Incremental parsing
• GitPython — Git repository access
• SQLite — Local database
• bcrypt — Password hashing
• PyJWT — Token management
• Pydantic — Data validation
• uv — Fast Python package manager

Frontend

• Next.js 14+ — React framework
• TypeScript — Type safety
• Tailwind CSS — Styling
• i18n — Multi-language (EN/TR)

Billing

• Lemon Squeezy — Merchant of Record
• HMAC-SHA256 — Webhook signature verification

DevOps

• GitHub Actions — CI/CD
• CodeQL — Security scanning
• Dependabot — Dependency updates
• uv — Python packaging

🔒 Security

• ✅ HMAC-SHA256 webhook signature verification
• ✅ bcrypt password hashing (cost factor 12)
• ✅ JWT tokens with 7-day expiry
• ✅ httpOnly + secure + sameSite cookies
• ✅ CORS protection
• ✅ SQL injection protection (parameterized queries)
• ✅ Pydantic input validation
• ✅ Rate limiting (FastAPI middleware)
• ✅ HTTPS only in production
• ✅ No telemetry — Your code stays yours

🌍 Languages Supported

CodeDNA's Tree-sitter parsers support:

• ✅ Python (.py)
• ✅ JavaScript (.js)
• ✅ TypeScript (.ts)
• ✅ JSX (.jsx)
• ✅ TSX (.tsx)

Coming soon: Go, Rust, Java, C#, Ruby, PHP

📦 Project Structure

codedna/
├── cli.py                  # 25 CLI commands
├── api.py                  # FastAPI REST endpoints
├── auth.py                 # JWT authentication
├── plan.py                 # License/plan management
├── db.py                   # SQLite database
├── scorer.py               # AI risk scoring
├── analyzer.py             # Code analysis
├── ai_fingerprint.py       # AI detection
├── bus_factor.py           # Ownership analysis
├── tech_debt.py            # Technical debt
├── sprint_health.py        # Sprint metrics
├── survey.py               # Onboarding
├── interview.py            # Q&A tool
├── protection.py           # Module protection
├── rate_limit.py           # API throttling
├── onboarding.py           # Developer tracking
├── integrations/
│   ├── lemonsqueezy.py     # Billing integration
│   └── github.py           # GitHub API
├── dashboard/              # Next.js frontend
│   ├── app/                # 13 pages
│   ├── components/         # UI components
│   └── lib/                # Utilities
├── tests/                  # Pytest suite
├── pyproject.toml          # Python config
├── README.md               # This file
├── CHANGELOG.md            # Release notes
├── LICENSE                 # MIT
├── CONTRIBUTING.md         # How to contribute
└── SECURITY.md             # Security policy

🧪 Testing

# Tum testleri calistir
pytest

# Coverage ile
pytest --cov=codedna

# Specific test
pytest tests/test_ai_fingerprint.py

Test coverage: 80%+ across all modules.

📚 Documentation

• Installation Guide — INSTALL.md
• CLI Reference — docs/CLI.md
• API Reference — http://localhost:8000/docs (when running)
• Webhook Guide — docs/WEBHOOKS.md
• Architecture — docs/ARCHITECTURE.md
• Roadmap — docs/ROADMAP.md

🤝 Contributing

We welcome contributions! See CONTRIBUTING.md for guidelines.

Development Setup

git clone https://github.com/natureco-official/codedna.git
cd codedna
python3 -m venv .venv
source .venv/bin/activate
pip install -e ".[dev]"
pytest

Code Style

• Black for Python
• Ruff for linting
• ESLint + Prettier for TypeScript

📜 License

MIT License — see LICENSE file.

MIT License - Copyright (c) 2026 NatureCo

🌟 Acknowledgments

• Tree-sitter — For blazing-fast parsing
• Typer — For beautiful CLI
• FastAPI — For modern API framework
• Lemon Squeezy — For hassle-free billing
• All our beta testers — For feedback and bug reports

💬 Community

• 💬 Discord: https://discord.gg/4FwumbWph
• 🐦 Twitter: @naturecoofficial
• 🐙 GitHub: https://github.com/natureco-official/codedna
• 📦 PyPI: https://pypi.org/project/codedna/
• 🌐 Website: https://natureco.me

🗺️ Roadmap

v0.3.0 (Q3 2026)

• VSCode extension (real-time)
• Go/Rust/Java support
• Slack bot
• Jira integration

v0.4.0 (Q4 2026)

• Team analytics dashboard
• AI coach (suggests learning resources)
• Custom AI fingerprinting
• Cloud sync (optional)

v1.0.0 (2027)

• Self-hosted option
• Enterprise SSO (SAML, OIDC)
• SOC 2 compliance
• Custom training data

More from NatureCo

• Cupertino Terminal — A macOS-grade terminal for Windows, macOS and Linux — Rust core, no Electron, with a built-in end-to-end encrypted P2P remote shell
• NatureCo CLI — A terminal-native AI assistant: chat, a coding agent, automation, and bots on Telegram, Discord and Slack
• Urðr — Tree-structured memory for AI coding agents — plain Markdown you can git diff, no vector database
• NatureCo SDK — JavaScript SDK for the NatureCo API — build AI chatbots and ship them anywhere

_{Part of the NatureCo ecosystem — natureco.me · NatureCo ekosisteminin parçası}