Created by Aabid Hussain Wani
Understand software architecture, predict the impact of code changes, and prevent risky deployments before they happen.
Homepage | NPM Registry | Documentation | Changelog | Support
StrataMetriq is an enterprise-grade Visual Studio Code extension that delivers 360° Architectural Visibility, Interactive Dependency Explorer, and 13-Point Pre-Deployment Safety Auditing directly inside your editor.
🎯 Why StrataMetriq?
- 🚫 Stop Shipping Bad Code: Catch left-over debugging code, secrets, and architectural violations before they make it to production.
- ⚡ Zero Cloud Exfiltration: 100% of AST parsing is executed locally. Your source code never leaves your IDE.
- 🧠 Instant Architectural Context: Visualize how modules connect with interactive dependency graphs instead of tracing files blindly.
🌟 Key Features
1. Interactive Dependency Explorer
Visualize your entire codebase architecture and how modules connect with an interactive dependency graph.
2. API Flow Visualizer
Automatically trace and visualize your API endpoints, routes, and their downstream data flow.
3. Risk Impact Analysis
Understand the downstream ripple effects of code changes before you commit.
4. Architectural Health & Complexity
Monitor your workspace health score and structural complexity over time.
🛡️ Pre-Deployment Safety Audit (13-Point Checklist)
Identify and fix critical issues before they reach production. The live dashboard instantly scans your workspace for 13 critical heuristics:
| 🛑 Safety Audit Rule | Description & Impact |
|---|---|
| 1. Hardcoded Secrets | Detects API keys, JWTs, and database credentials accidentally left in source code. |
| 2. Active Debug Code | Finds forgotten console.log, debugger, and print() statements. |
| 3. Temporary Code | Highlights TEMP, HACK, or WIP comments that were never cleaned up. |
| 4. Test Data in Prod | Prevents dummy data or mock variables from being shipped. |
| 5. Unresolved TODOs | Flags TODO and FIXME comments that require attention. |
| 6. Commented Code | Detects large blocks of commented-out logic cluttering the codebase. |
| 7. Dead Code | Identifies unused exports and orphaned functions that can be safely deleted. |
| 8. Empty Catch Blocks | Warns about swallowed errors catch (e) {} that mask production failures. |
| 9. DevDependencies | Detects testing libraries or build tools accidentally imported into production logic. |
| 10. Memory Leaks | Flags un-cleared event listeners, intervals, and timeouts. |
| 11. Insecure Crypto | Detects usage of weak hashing algorithms like MD5 or SHA1. |
| 12. SQL Injection | Warns about raw string concatenations in database queries. |
| 13. XSS Risks | Flags dangerous DOM manipulations like innerHTML or dangerouslySetInnerHTML. |
(All rules include deep-links directly to the offending line of code in your editor!)
🚀 How to Install & Use
1. Installation
- Open VS Code and navigate to the Extensions view (
Ctrl+Shift+Xon Windows/Linux orCmd+Shift+Xon Mac). - Search for
StrataMetriq. - Click Install.
- (Alternatively, you can install it directly via the VS Code Marketplace).
2. Launching the Interactive Dashboard
StrataMetriq provides a fully interactive, local React dashboard right inside your IDE.
- Open the Command Palette (
Ctrl+Shift+P/Cmd+Shift+P). - Type and run:
StrataMetriq: Open Dashboard. - The 360° Architecture & Pre-Deployment Safety dashboard will open in a new panel!
3. Native IDE Integrations
- Live Squiggles: As you type, architectural violations and pre-deployment risks (like
console.logor memory leaks) will be instantly highlighted with red/yellow squiggles in your editor. - Context Menus: Right-click any folder in your VS Code Explorer and select "Analyze with StrataMetriq" to scope the analysis down to a specific microservice or module.
- Pause/Resume Diagnostics: Testing locally? Click the "StrataMetriq: Ready" button in your bottom status bar to instantly pause the extension and clear all squiggles. Click it again to resume!
🔒 Enterprise Security (Zero Cloud Exfiltration)
Your code is safe. 100% of Abstract Syntax Tree (AST) parsing, duplicate code detection, and graph calculation is executed locally on your machine. Your source code never leaves your IDE. We do not transmit telemetry, API routes, or code snippets to external servers.
📄 License
MIT © StrataMetriq Engineering Team