Review the codebase, not just the diff.

A broad first pass

Quick review runs a fast set of check families across supported source and common configuration files. It surfaces likely performance, correctness, maintainability, test, credential, and risky-API concerns.

The report records the exact revision analyzed. Coverage notes identify incomplete, unavailable, or omitted work so that an empty result is not mistaken for proof that the repository is clean.

• JavaScript and TypeScript
• Python, Java, Rust, and Go
• Ruby, C, C++, PHP, Scala, C#, and Kotlin

A deeper look when the decision matters

Deep review adds selected data-flow checks and broader contextual reading. It can use bounded source, project documentation, architecture samples, and available recent commit metadata to prioritize next steps when the evidence supports them.

Quick and deep reviews remain explicit about their scope. Neither is a guarantee that every defect, secret, or security issue has been found.

Designed for hostile repository input

SlopCop reads source but does not execute repository code, run builds, or install repository dependencies. Private GitHub access is read-only for the repositories you select.

Credential-like matches are reported by location without reproducing the matched value, and flagged files are excluded from source excerpts supplied to the model.