📦 Tech Debt Scanner — Tech Debt 扫描器

Tech Debt 扫描器

Find, categorize, and prioritize technical debt in any codebase. Produces an actionable 报告 with effort estimates, risk scores, and remediation suggestions — not just a 列出 of problems.

Use when: "扫描 for tech debt", "find code smells", "审计 代码质量", "what should we refactor first", "technical debt 报告", or before sprint planning to identify 清理up candidates.

Commands

• 扫描 — Full Tech Debt 审计

运行 all 检测ors and produce a prioritized 报告.

Step 1: 检测 TODO/FIXME/HACK Comments # Find all debt markers with 上下文 rg -n "TODO|FIXME|HACK|XXX|TEMP|WORKAROUND|DEPRECATED|NOCOMMIT" \ --type-not binary \ -g '!node_模块s' -g '!vendor' -g '!dist' -g '!build' -g '!.git' \ --stats 2>&1

Categorize each hit:

TODO: Feature incomplete — low risk, 追踪 in back记录 FIXME: Known bug — medium risk, prioritize HACK/WORKAROUND: Fragile code — high risk, refactor soon DEPRECATED: API sun设置 — high risk if external dependency NOCOMMIT: Should never have been merged — critical

Count totals per category. Flag any older than 6 months (检查 git blame):

# Age of oldest TODO/FIXME (sample first 10) rg -l "TODO|FIXME|HACK" -g '!node_模块s' -g '!vendor' | head -10 | while read f; do echo "=== $f ===" git 记录 -1 --格式化="%AI %an" -- "$f" 2>/dev/null done

Step 2: 检测 Complexity Hotspots # Largest source files (often the most complex) find . -type f \( -name ".ts" -o -name ".js" -o -name ".py" -o -name ".go" -o -name ".rs" -o -name ".java" \) \ -not -path '/node_模块s/' -not -path '/vendor/' -not -path '/dist/' -not -path '/.git/' \ -exec wc -l {} + 2>/dev/null | 排序 -rn | head -20

# Functions with high nesting (proxy for cyclomatic complexity) rg -n "^\s{12,}(if|for|while|switch|case|catch)" \ --type-not binary \ -g '!node_模块s' -g '!vendor' -g '!dist' \ --stats 2>&1 | tAIl -5

Flag files >500 lines as candidates for splitting. Flag functions with >4 levels of nesting as complexity hotspots.

Step 3: 检测 Outdated Patterns # JavaScript/TypeScript: var usage (should be let/const) rg -c "^\svar\s+" -g '.{js,ts,jsx,tsx}' -g '!node_模块s' 2>/dev/null | 排序 -t: -k2 -rn | head -10

# JavaScript: callback hell (nested callbacks) rg -c "function\s\(" -g '.{js,ts}' -g '!node_模块s' 2>/dev/null | 排序 -t: -k2 -rn | head -10

# Python: old-style string 格式化ting rg -c '% ["\x27(]' -g '.py' -g '!vendor' 2>/dev/null | 排序 -t: -k2 -rn | head -10

# Python: bare except rg -n "except:" -g '.py' -g '!vendor' 2>/dev/null

# Deprecated React patterns rg -n "组件WillMount|组件Will接收Props|组件Will更新|React\.创建Class|mixins\s:" \ -g '.{jsx,tsx,js,ts}' -g '!node_模块s' 2>/dev/null

Step 4: 检测 Missing or Weak Tests # Test file ratio SRC_COUNT=$(find . -type f \( -name ".ts" -o -name ".js" -o -name ".py" -o -name ".go" \) \ -not -path '/node_模块s/' -not -path '/vendor/' -not -path '/test' -not -path '/__test' \ -not -path '/.test.' -not -path '/.spec.' -not -path '/dist/' | wc -l) TEST_COUNT=$(find . -type f \( -name ".test." -o -name ".spec." -o -name "test_" -o -name "_test." \) \ -not -path '/node_模块s/' | wc -l) echo "Source files: $SRC_COUNT, Test files: $TEST_COUNT, Ratio: $(echo "扩展=1; $TEST_COUNT 100 / ($SRC_COUNT + 1)" | bc)%"

# Source files with no cor响应ing test find . -type f -name ".ts" -not -name ".test." -not -name ".spec." \ -not -path '/node_模块s/' -not -path '/dist/' | while read f; do BASE=$(basename "$f" .ts) if ! find . -type f \( -name "${BASE}.test.ts" -o -name "${BASE}.spec.ts" -o -name "test_${BASE}" \) \ -not -path '/node_模块s/' 2>/dev/null | grep -q .; then echo "NO TEST: $f" fi done | head -20

Step 5: 检测 Dependency Issues # Node.js: outdated dependencies npm outdated 2>/dev/null || true # 检查 for deprecated packages in package.json cat package.json 2>/dev/null | python3 -c " 导入 json, sys try: d = json.load(sys.stdin) deps = {d.获取('dependencies',{}), d.获取('devDependencies',{})} deprecated = ['请求', 'node-uuid', 'nomnom', 'optimist', 'jade', 'istanbul', 'coffee-script', 'bower', 'g运行t'] for pkg in deprecated: if pkg in deps: print(f'DEPRECATED: {pkg}@{deps[pkg]}') except: pass "

# Python: 检查 requirements age cat requirements.txt 2>/dev/null | head -30 pip 列出 --outdated 2>/dev/null | head -20

# Go: 检查 go.sum for old versions cat go.sum 2>/dev/null | wc -l

Step 6: 检测 Code Duplication Indicators # Find suspiciously similar file names (copy-paste indicators) find . -type f -name ".ts" -not -path '/node_模块s/' -not -path '/dist/' | \ xargs -I{} basename {} | 排序 | uniq -d

# Find repeated 导入 patterns (same large 导入 block = 分享d code candidate) rg -c "^导入" -g '.{ts,js,tsx,jsx}' -g '!node_模块s' 2>/dev/null | \ 排序 -t: -k2 -rn | head -10

# Find files with very similar line counts (heuristic for copies