
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Find why AI assistants get confused by your code and fix it. Get AI readiness score and actionable improvements.
Why AI assistants get confused by your code and how to fix it.
Dazzer scans your repository and shows exactly what makes AI tools like Copilot and Cursor struggle with your codebase. Get a clear AI readiness score and actionable fixes.
# Install
npm install -g dazzer
# Scan your project
dazzer
# Scan specific folder
dazzer /path/to/your/project
AI Readiness Score (0-100) - Higher scores mean AI assistants work better with your code
Issue List - Specific problems that confuse AI, with exact locations and fix suggestions
Categories:
# Basic scan
dazzer .
# Save detailed report
dazzer . --output report.txt
# Get JSON for tools
dazzer . --json results.json
Score Ranges:
Code Quality Issues:
dazzer . --naming # Inconsistent naming conventions
dazzer . --missing-docs # Functions without documentation
dazzer . --long-functions # Functions over 50 lines
dazzer . --deep-nesting # Too many nested levels
dazzer . --magic-numbers # Hardcoded numbers without explanation
dazzer . --type-hints # Missing type annotations
dazzer . --duplicates # Duplicate code blocks
AI Confusion Patterns:
dazzer . --cognitive-complexity # Complex logic flow
dazzer . --ambiguous-returns # Unclear return values
dazzer . --hidden-side-effects # Functions that modify global state
dazzer . --implicit-context # Code that relies on hidden assumptions
dazzer . --stringly-typed # Using strings instead of proper types
dazzer . --dynamic-attr # Dynamic attribute access
dazzer . --type-coercion # Automatic type conversions
Architecture Problems:
dazzer . --temporal-coupling # Order-dependent operations
dazzer . --cross-file # Complex dependencies between files
dazzer . --mixed-abstraction # Mixing high/low level concepts
dazzer . --config-spread # Configuration scattered everywhere
dazzer . --overloaded-names # Same names meaning different things
Code Structure Issues:
dazzer . --callback-hell # Deeply nested callbacks
dazzer . --exception-swallowing # Catching errors without handling
dazzer . --heavy-mocking # Tests with excessive mocking
dazzer . --business-docs # Missing business logic explanations
Start with these (biggest AI impact):
dazzer . --missing-docsdazzer . --namingdazzer . --long-functionsdazzer . --type-hintsdazzer . --magic-numbers# Comprehensive analysis
dazzer . --full-report
# Simple stakeholder report
dazzer . --simple
# Focus on AI integration issues
dazzer . --ai-agent --json ai-report.json
# Generate Cursor IDE rules
dazzer . --cursor-rules
# Performance tuning
dazzer . --workers 8 --verbose
# Exclude directories
dazzer . --exclude-dirs tests node_modules build
Python, JavaScript, TypeScript, React, Java, C/C++, C#, Go, Rust, Ruby, PHP, Swift, Kotlin, Dart, Shell, and 20+ more.
"Python not found" - Install Python 3.8+ from python.org
"Permission denied" - Run sudo npm install -g dazzer (macOS/Linux)
Slow scanning - Use --exclude-dirs to skip large folders like node_modules
Empty results - Check you're in a code directory with supported file types
Email: support@dazzer.io
Issues: https://github.com/designmetric/dazzer/issues
Dazzer collects anonymous usage statistics to improve the tool. No source code or personal information is ever collected. Disable with dazzer --disable-telemetry or set DAZZER_TELEMETRY=false.
Make your code AI-ready in minutes, not hours.
FAQs
Find why AI assistants get confused by your code and fix it. Get AI readiness score and actionable improvements.
We found that dazzer demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.