Repository intelligence without turning every signal into noise.

Modern repositories carry more than source code. They include third-party dependencies, deployment configuration, credentials, automation, framework conventions and security-sensitive execution paths.

GSkout exists to bring those signals into one readable report. The goal is not to produce the largest possible warning count. The goal is to make repository risk understandable.

GSkout V1 focuses on JavaScript and Node.js projects. It combines dependency intelligence, committed secret detection, AST-aware source checks, lightweight source-to-sink context, configuration analysis, repository files and an explainable health score.