codedna 0.2.11

AI Code Transparency Tool - detect AI-written code and measure developer understanding

🧬 CodeDNA — AI Code Transparency Tool

Understand every line of code you commit. Is it really yours, or AI's?

Detect which code was written by AI, measure how well developers actually understand their commits, and map out "understanding debt" across your entire team.

Quick Start • Features • Commands • Pricing • Docs

---

🎯 The Problem

In 2026, developers write 78% of their code with AI help (Copilot, Cursor, ChatGPT, Claude). The result?

• 😰 "Understanding Debt" — Code is committed, but no one actually knows how it works
• 🚌 Bus Factor = 1 — Everyone uses the same AI, no one understands the codebase
• 💰 Technical Debt Explosion — Without human review, AI-generated code decays fast
• 🐛 Bug Multiplication — 3 months later: "Who wrote this? I don't even know what it does"

CodeDNA solves this. Every commit is scored. Every developer is measured. Every team gets visibility.

---

✨ Features

🔍 AI Detection (4-metric fingerprint)

CodeDNA uses 4 heuristics to detect AI-generated code:

Metric	AI Signature	Score
comment_ratio > 0.3	AI over-comments its code	+0.20
avg_function_length > 50	AI produces large monolithic blocks	+0.15
single_commit_ratio > 0.7	Bulk-paste commits are AI-red flag	+0.30
High complexity + single commit	AI imzası → +0.25

Total > 0.50 → AI suspected. Combined with Tree-sitter AST analysis, this gives 80%+ accuracy.

👤 Developer Understanding Score

• Interview-based — Structured Q&A after each commit
• AI-powered — Generates questions about the code you just committed
• Tracked over time — See your understanding curve

🚌 Bus Factor Analysis

• Ownership tracking — Who owns which file?
• Risk identification — Single points of failure
• Refactoring suggestions — "Pair X with Y on module Z"

💰 Technical Debt Estimation

• Cost in USD — How much would it cost to fix this?
• Trend over time — Is debt increasing?
• Prioritization — What to fix first?

🏃 Sprint Health

• Velocity tracking — Real commits vs. AI-assisted
• Code review load — Who reviews what?
• Quality metrics — Per-sprint scoring

🤖 AI Tool Comparison (Enterprise)

• Copilot vs. Cursor vs. ChatGPT — Which tool produces more debt?
• Per-developer breakdown — Who uses what?
• Productivity vs. quality — Real metrics

🎯 Interview Tool (Enterprise)

• Auto-generates questions — "What does this function do? Why?"
• Records responses — For HR and compliance
• Exportable reports — PDF/CSV

🚀 Developer Onboarding

• Ramp-up curve — How long to productivity?
• Mentor matching — AI suggests pairs
• First PR analysis — What did they ship?

🛡️ Protected Modules

• Mark critical files — "AI may not touch auth/, payment/, security/"
• Pre-commit hook — Blocks AI-generated commits to protected areas
• Override workflow — With approval

📊 Web Dashboard

• Real-time metrics — Live commit feed
• Charts — Time-series, breakdowns, comparisons
• Multi-repo view — All your projects in one place
• Team analytics — Who's growing, who's stagnating

💬 Multi-Channel Support

• Telegram bot — /codedna scan from your phone
• WhatsApp — Slash-prefix commands
• iMessage — Direct Mac integration
• Discord/Slack — Webhook support

---

🚀 Quick Start

Installation

# PyPI'den
pip install codedna

# Veya uv ile (daha hizli)
uv pip install codedna

# Veya gelistirme ortamindan
git clone https://github.com/natureco-official/codedna.git
cd codedna
pip install -e .

First Use (60 seconds)

# 1. Git repo'ya git
cd your-awesome-project

# 2. CodeDNA'yi baslat (git hook + DB olusturur)
codedna init

# 3. Repoyu tara
codedna scan

# 4. Son commit skorunu gor
codedna status

# 5. Gecmis commit'leri gor
codedna history

That's it. Every commit from now on is auto-analyzed.

Run the Dashboard (optional)

# Web dashboard (port 3000) + REST API (port 8000)
codedna dashboard

# Then open http://localhost:3000
# Login with your account or register new

---

📋 Commands (25 total)

📊 Analysis & Reporting

codedna init                  # Git hook + DB olustur
codedna scan                  # Repoyu tara
codedna status                # Son commit skoru
codedna history               # Gecmis commit'ler
codedna report                # HTML rapor olustur
codedna ai-compare            # AI arac karsilastirmasi (Enterprise)

🛡️ Protection & Policies

codedna protect-add <path>    # Korunan modul ekle
codedna protect-remove <path> # Korumayi kaldir
codedna protect-list          # Korunan modulleri listele
codedna protect-check <file>  # Dosya korunuyor mu?

👥 Team & Process

codedna onboarding            # Gelistirici ramp-up (Team+)
codedna interview-start       # Mulakat baslat (Enterprise)
codedna interview-list        # Mulakatlari listele
codedna interview-score       # Mulakat skorla
codedna bus-factor            # Sahiplik analizi (Team+)
codedna debt                  # Teknik borc (Team+)
codedna sprint-olustur        # Sprint olustur
codedna sprint-sagligi         # Sprint sagligi
codedna sprint-gecmisi         # Sprint gecmisi

🌐 Infrastructure

codedna serve                 # FastAPI REST (port 8000)
codedna dashboard             # Web dashboard (port 3000)
codedna pr-comment            # GitHub PR yorumu
codedna plan                  # Plan/lisans yonetimi
codedna plan demo pro         # 7 gunluk demo Pro lisans
codedna natureco              # NatureCo CLI entegrasyonu (Pro+)
codedna uninstall             # Hook kaldir

🔧 Utility

codedna doctor                # Sistem saglik kontrolu
codedna reset                 # Sifirla (DANGEROUS)

---

💎 Pricing

Plan	Price	Repos	Files/Scan	History	Dashboard	Features
Free	$0	1	50	7 days	❌	AI detection, local only
Pro	₺400/mo	∞	∞	90 days	✅	+ GitHub Actions, NatureCo CLI
Team	₺800/mo	∞	∞	365 days	✅	+ Bus Factor, Sprint, Onboarding
Enterprise	₺1,650/mo	∞	∞	∞	✅	+ AI Compare, Interview Tool, SSO

Start with codedna plan demo pro to test Pro features for 7 days.

Payment via Lemon Squeezy — TRY pricing for Turkish market, USD for global.

---

🔌 Integrations

CI/CD

• GitHub Actions — Auto-comment on PR
• GitLab CI — Pipeline integration
• Bitbucket Pipelines — Snippets

Issue Trackers

• Jira — Story → commit mapping
• Linear — Issue tracking
• GitHub Issues — Auto-link

Notifications

• Slack — Real-time alerts
• Discord — Webhook support
• Telegram — Bot commands
• Email — Daily digest

AI Tools

• GitHub Copilot — Detection
• Cursor — Detection
• ChatGPT/Claude — Detection
• Codeium — Detection

---

🛠️ Architecture

┌─────────────────────────────────────────────────────────┐
│  CLI (Python 7,000+ LOC)                                │
│  ├── Typer framework                                    │
│  ├── Tree-sitter parsers (Python, JS, TS, JSX, TSX)   │
│  ├── GitPython (commit analysis)                        │
│  ├── SQLite (local DB)                                  │
│  └── JWT (auth)                                         │
└─────────────────────────────────────────────────────────┘
                          │
                          ↓ HTTP
┌─────────────────────────────────────────────────────────┐
│  REST API (FastAPI)                                     │
│  ├── /auth (register, login, me)                        │
│  ├── /billing (checkout, webhook, subscription)        │
│  ├── /commits (list, scores)                            │
│  ├── /files (analysis)                                  │
│  └── /repo (bus-factor, debt, sprint)                   │
└─────────────────────────────────────────────────────────┘
                          │
                          ↓ HTTP
┌─────────────────────────────────────────────────────────┐
│  Web Dashboard (Next.js)                                │
│  ├── /dashboard (metrics)                               │
│  ├── /files (file list)                                 │
│  ├── /commits (commit history)                          │
│  ├── /bus-factor (ownership)                            │
│  ├── /debt (technical debt)                             │
│  ├── /sprints (sprint health)                            │
│  ├── /ai-compare (tool comparison)                       │
│  ├── /onboarding (developer ramp-up)                    │
│  ├── /protected (module list)                           │
│  ├── /interview (Q&A tool)                               │
│  ├── /settings/integrations                              │
│  └── /pricing (plan comparison)                          │
└─────────────────────────────────────────────────────────┘

3-Layer Stack

1. CLI — Terminal-first developers
2. REST API — Backend for dashboard + integrations
3. Web Dashboard — Manager/CTO view

---

🏗️ Tech Stack

Backend

• Python 3.10+ — Core language
• Typer — Modern CLI framework
• FastAPI — High-performance REST API
• Tree-sitter — Incremental parsing
• GitPython — Git repository access
• SQLite — Local database
• bcrypt — Password hashing
• PyJWT — Token management
• Pydantic — Data validation
• uv — Fast Python package manager

Frontend

• Next.js 14+ — React framework
• TypeScript — Type safety
• Tailwind CSS — Styling
• i18n — Multi-language (EN/TR)

Billing

• Lemon Squeezy — Merchant of Record
• HMAC-SHA256 — Webhook signature verification

DevOps

• GitHub Actions — CI/CD
• CodeQL — Security scanning
• Dependabot — Dependency updates
• uv — Python packaging

---

🔒 Security

• ✅ HMAC-SHA256 webhook signature verification
• ✅ bcrypt password hashing (cost factor 12)
• ✅ JWT tokens with 7-day expiry
• ✅ httpOnly + secure + sameSite cookies
• ✅ CORS protection
• ✅ SQL injection protection (parameterized queries)
• ✅ Pydantic input validation
• ✅ Rate limiting (FastAPI middleware)
• ✅ HTTPS only in production
• ✅ No telemetry — Your code stays yours

---

🌍 Languages Supported

CodeDNA's Tree-sitter parsers support:

• ✅ Python (.py)
• ✅ JavaScript (.js)
• ✅ TypeScript (.ts)
• ✅ JSX (.jsx)
• ✅ TSX (.tsx)

Coming soon: Go, Rust, Java, C#, Ruby, PHP

---

📦 Project Structure

codedna/
├── cli.py                  # 25 CLI commands
├── api.py                  # FastAPI REST endpoints
├── auth.py                 # JWT authentication
├── plan.py                 # License/plan management
├── db.py                   # SQLite database
├── scorer.py               # AI risk scoring
├── analyzer.py             # Code analysis
├── ai_fingerprint.py       # AI detection
├── bus_factor.py           # Ownership analysis
├── tech_debt.py            # Technical debt
├── sprint_health.py        # Sprint metrics
├── survey.py               # Onboarding
├── interview.py            # Q&A tool
├── protection.py           # Module protection
├── rate_limit.py           # API throttling
├── onboarding.py           # Developer tracking
├── integrations/
│   ├── lemonsqueezy.py     # Billing integration
│   └── github.py           # GitHub API
├── dashboard/              # Next.js frontend
│   ├── app/                # 13 pages
│   ├── components/         # UI components
│   └── lib/                # Utilities
├── tests/                  # Pytest suite
├── pyproject.toml          # Python config
├── README.md               # This file
├── CHANGELOG.md            # Release notes
├── LICENSE                 # MIT
├── CONTRIBUTING.md         # How to contribute
└── SECURITY.md             # Security policy

---

🧪 Testing

# Tum testleri calistir
pytest

# Coverage ile
pytest --cov=codedna

# Specific test
pytest tests/test_ai_fingerprint.py

Test coverage: 80%+ across all modules.

---

📚 Documentation

• Installation Guide — INSTALL.md
• CLI Reference — docs/CLI.md
• API Reference — http://localhost:8000/docs (when running)
• Webhook Guide — docs/WEBHOOKS.md
• Architecture — docs/ARCHITECTURE.md
• Roadmap — docs/ROADMAP.md

---

🤝 Contributing

We welcome contributions! See CONTRIBUTING.md for guidelines.

Development Setup

git clone https://github.com/natureco-official/codedna.git
cd codedna
python3 -m venv .venv
source .venv/bin/activate
pip install -e ".[dev]"
pytest

Code Style

• Black for Python
• Ruff for linting
• ESLint + Prettier for TypeScript

---

📜 License

MIT License — see LICENSE file.

MIT License - Copyright (c) 2026 NatureCo

---

🌟 Acknowledgments

• Tree-sitter — For blazing-fast parsing
• Typer — For beautiful CLI
• FastAPI — For modern API framework
• Lemon Squeezy — For hassle-free billing
• All our beta testers — For feedback and bug reports

---

💬 Community

• 💬 Discord: https://discord.gg/4FwumbWph
• 🐦 Twitter: @naturecoofficial
• 🐙 GitHub: https://github.com/natureco-official/codedna
• 📦 PyPI: https://pypi.org/project/codedna/
• 🌐 Website: https://natureco.me

---

🗺️ Roadmap

v0.3.0 (Q3 2026)

• VSCode extension (real-time)
• Go/Rust/Java support
• Slack bot
• Jira integration

v0.4.0 (Q4 2026)

• Team analytics dashboard
• AI coach (suggests learning resources)
• Custom AI fingerprinting
• Cloud sync (optional)

v1.0.0 (2027)

• Self-hosted option
• Enterprise SSO (SAML, OIDC)
• SOC 2 compliance
• Custom training data

---

Made with 🌿 in Turkey

⭐ Star us on GitHub • 📦 Install from PyPI • 🐦 Follow on Twitter