Vibgrate

Vibgrate CLI helps you understand what is ageing in your software stack, what needs attention now, and how a change could affect the rest of your codebase.

Run a scan to check dependencies, frameworks and runtimes. DriftScore (0–100) shows how far your stack has fallen behind, while a separate RiskScore assesses security exposure. That distinction matters: an actively exploited vulnerability and an old but otherwise low-risk dependency call for different priorities. Vibgrate gives you a ranked list of upgrade work instead of treating every outdated package alike.

The CLI also builds a deterministic code graph so you can explore architecture, trace calls and imports, and see the impact of a proposed change. With vg serve, its local MCP server gives compatible AI assistants access to that code map, drift findings and library documentation matched to the versions your project uses. It can also export SBOMs and OpenVEX documents.

Vibgrate runs locally, requires no signup, and supports offline use. Drift scoring reads manifests and configuration files; code-map features analyse source on your machine. Its scoring formulas and limitations are published in a citable methodology.

Try a scan with npx @vibgrate/cli scan. Vibgrate Cloud is available for teams that want hosted workflows.