Universal Project Setup Autopilot - Analyze and automatically configure development tools for ANY programming language
WorkaroundUltra - Universal Project Setup Autopilot & Production-Readiness Agent
The ultimate "Tech Lead in a Box" - Analyze, monitor, and automatically configure development tools for ANY programming language with real-time quality checks, SOLID architecture analysis, and production-readiness audits.
Release Date: August 4, 2025
This release focuses on improving user experience for AI provider management and code review functionality.
Key Improvements:
Previous Major Features (v5.3.0):
woaru init): Complete project scaffolding system with Next.js and Python FastAPI templatesRevolutionary Features:
Release Date: July 28, 2025
Release Date: July 26, 2025
This release represents a comprehensive technical hardening of the entire codebase, addressing critical issues identified in an external code review.
Key Improvements:
any warnings eliminated with proper type definitionsTechnical Details:
any types in production codeRelease Date: July 19, 2025
New Feature: Enterprise-grade security vulnerability detection system with comprehensive threat analysis. WOARU now includes professional-grade security scanning capabilities with Semgrep integration and intelligent pattern-based fallback analysis.
Enhanced Feature: Fully internationalized user interface with comprehensive language support. All hardcoded German strings (100+) have been replaced with proper i18n translation keys, providing seamless German and English language support throughout the entire application.
Revolutionary Solution:
~/.woaru/config/user.jsonwoaru language command for intuitive language selectionwoaru config set language <lang> for direct configurationwoaru status shows localized output)# New i18n Commands
woaru language # Interactive language selection
woaru config set language de # Direct language setting
woaru config show # Display current language settings
# First-time Setup
🌍 Welcome to WOARU / Willkommen bei WOARU
? Please select your preferred language:
❯ 🇺🇸 English (en)
🇩🇪 Deutsch (de)
src/config/i18n.ts - Complete internationalization systemsrc/config/languageSetup.ts - Interactive language selectionsrc/config/ConfigManager.ts - User preferences persistencesrc/ai/AIReviewAgent.ts - Localized AI prompt generationlocales/en/ and locales/de/ - Comprehensive language filesRelease Date: July 16, 2025
Problem Solved: v4.7.0 introduced a revolutionary AI Control Center, but contained critical bugs that caused crashes and inconsistent behavior. Users experienced Cannot read properties of null (reading 'enabled') errors and inconsistent CLI documentation.
Professional Solution:
Cannot read properties of null (reading 'enabled') error in AI Control Centermulti_ai_review_enabled and primary_review_provider_id as providersgetConfiguredAiProviders() now correctly filters only actual provider objectsgetEnabledAiProviders() properly ignores metadata and configuration entriesgetConfiguredProviderCount() accurately counts only valid provider configurationswoaru commands documentation now consistently uses ai instead of llm// Fixed ConfigManager provider filtering
async getConfiguredAiProviders(): Promise<string[]> {
const providers = [];
for (const [key, value] of Object.entries(config)) {
// Skip metadata and configuration entries
if (key === '_metadata' || key === 'multi_ai_review_enabled' || key === 'primary_review_provider_id') {
continue;
}
// Only include actual provider objects
if (value && typeof value === 'object' && value.hasOwnProperty('enabled')) {
providers.push(key);
}
}
return providers;
}
Cannot read properties of null errorsai terminology throughout documentationRelease Date: July 16, 2025
New Feature: Advanced AI provider management with granular control over Multi-AI vs Single-AI Review modes. Users can now choose between comprehensive multi-provider analysis or focused single-provider reviews for faster, cost-effective code analysis.
Key Features:
# New AI Control Center
npx woaru ai # Interactive AI provider dashboard
npx woaru ai setup # Enhanced provider setup with onboarding
# Multi-AI Review Configuration
"multi_ai_review_enabled": true # Enable multi-provider analysis
"primary_review_provider_id": "anthropic" # Set primary for single-AI mode
src/cli.ts:300-450 - Interactive dashboard with context-sensitive menussrc/config/ConfigManager.ts:315-366 - Global review mode managementsrc/ai/ConfigLoader.ts:105-155 - Dynamic provider selection logicRelease Date: July 16, 2025
Problem Solved: v4.6.0 introduced a new AI setup dialog that had critical usability issues: incorrect prompt order (API key before model selection), broken interactive navigation, and configuration migration failures that caused users to lose their existing AI provider settings.
Professional Solution:
# Fixed setup workflow
npx woaru ai setup # New, working interactive setup
npx woaru setup llm # Backward compatibility maintained
# Configuration migration
~/.woaru/config/llm_config.json → ~/.woaru/config/ai_config.json
src/cli.ts:349-450 - Complete rewrite with proper prompt sequencingsrc/config/ConfigManager.ts:433-461 - Automatic legacy config migrationai-models.json for up-to-date provider informationRelease Date: July 16, 2025
Problem Solved: v4.5.0 used technical "LLM" terminology throughout the CLI, which was confusing for non-technical users and created barriers to adoption. The term "LLM" (Large Language Model) is industry jargon that doesn't clearly communicate the value to end users.
User-Centric Solution:
woaru llm setup → woaru ai setup (with backward compatibility)woaru analyze llm → woaru analyze aiwoaru review git llm → woaru review git aiwoaru docu ai with German localizationllm commands still work with deprecation warningsllm_config.json to ai_config.json# New AI-first commands
woaru ai setup # Configure AI providers
woaru ai # View AI configuration status
woaru analyze ai # AI-powered code analysis
woaru review git ai # AI analysis of git changes
woaru docu ai # AI documentation generation
# Legacy commands (still work)
woaru setup llm # Shows deprecation warning
woaru analyze llm # Shows deprecation warning
Release Date: July 15, 2025
Problem Solved: v4.4.0 used image-to-ascii library which required external system dependencies (GraphicsMagick/ImageMagick) that weren't guaranteed on user systems, causing installation failures and poor user experience.
Revolutionary Solution:
image-to-ascii with jimp - 100% Pure JavaScript solution# Updated dependencies
- Removed: image-to-ascii (external deps)
+ Added: jimp (pure JavaScript)
# Enhanced file structure
src/utils/asciiArtGenerator.ts # Pure JS ASCII generation with jimp
src/assets/splash_logo.ts # Updated splash screen integration
# New capabilities
woaru # Shows cross-platform ASCII art logo
woaru --help # Shows help (unchanged)
src/utils/asciiArtGenerator.ts
rgbToAnsi256() - Custom RGB-to-ANSI-256 color conversiongetBrightness() - Pixel brightness calculation for character selectionintToRGBA() - Color extraction from jimp pixel datagenerateTerminalOptimizedAsciiArt() - 70x20 colored outputgenerateCompactAsciiArt() - 40x12 monochrome outputgenerateHighContrastAsciiArt() - 50x15 block-character outputgenerateFallbackAsciiArt() - Emergency fallback (unchanged)Release Date: July 15, 2025
Problem Solved: The ANSI art splash screen was displaying raw escape codes instead of colored graphics due to incorrect escape sequence format and console output method.
Professional Solution:
\e to \x1b for proper JavaScript interpretationconsole.log() with process.stdout.write() for ANSI codes# Fixed ANSI art display
woaru # Now shows proper colored logo
woaru --help # Shows full help as before
src/assets/splash_logo.ts - ANSI sequence correction and output method fix\e to \x1b formatRelease Date: July 15, 2025
Problem Solved: WOARU needed a distinctive visual identity and better user experience when launched without arguments, replacing the generic help output with a branded splash screen.
Professional Solution:
woaru is called without argumentswoaru without arguments--help and -h flags# New splash screen behavior
woaru # Shows ANSI art + quick commands
woaru --help # Shows full help as before
woaru version # Shows version as before
woaru analyze # Runs analysis as before
src/assets/
└── splash_logo.ts # ANSI art and splash screen logic
Release Date: January 15, 2025
Problem Solved: Based on comprehensive project audit, WOARU needed professional-grade testing infrastructure to prevent critical bugs like hardcoded model lists and premature releases that occurred in previous versions.
Professional Solution:
# Test Infrastructure
npm test # Run all tests including new integration tests
npm run test:watch # Watch mode for development
# Test Categories:
- Unit Tests: Existing CodeAnalyzer and ProjectAnalyzer tests
- Integration Tests: ToolsDatabaseManager and Setup LLM process tests
- Mock Data: tests/fixtures/ with consistent test data
- Quality Gates: PRE_RELEASE_CHECKLIST.md for manual verification
# Test Coverage:
tests/
├── fixtures/ # Mock data for consistent testing
│ ├── mock-ai-models.json # AI models test data
│ ├── mock-tools.json # Tools database test data
│ └── mock-woaru-config.js # Configuration test data
├── integration/ # Integration tests
│ ├── ToolsDatabaseManager.integration.test.ts
│ └── setup-llm.integration.test.ts
└── setup.ts # Test utilities and custom matchers
Release Date: January 15, 2025
ai-models.json loading priority in ToolsDatabaseManagerRelease Date: January 15, 2025
ai-models.json for centralized model managementRelease Date: July 15, 2025
Problem Solved: Development teams need reliable, automated version management and environment validation to maintain consistent, up-to-date toolchains across projects and team members.
Revolutionary Solution:
woaru version - Display current versionwoaru version check - Check for updates with release dateswoaru update - One-command update to latest version# Check current version
woaru version
# Output: WOARU Version: 3.8.0
# Check for updates
woaru version check
# Output: 📦 Eine neue Version (v3.8.1) ist verfügbar!
# Veröffentlicht am: 16.07.2025
# Update to latest version
woaru update
# Output: 🚀 Updating WOARU to latest version...
# ✅ Update erfolgreich abgeschlossen!
# Automatic startup checks
woaru analyze
# Output: 📋 Hinweise:
# 💡 Eine neue Version ist verfügbar. Führe 'woaru update' aus.
# 💡 TIPP: Docker ist nicht verfügbar. Containerisierung-Checks werden übersprungen.
WOARU now automatically validates your development environment on startup:
woaru review git functionalityRelease Date: July 15, 2025
Problem Solved: After extensive testing, we identified and fixed six critical bugs that could impact production usage. This PATCH release ensures WOARU is fully stable and ready for enterprise deployment.
Critical Fixes:
docu subcommands to comprehensive command referenceThis release transforms WOARU from "feature-complete" to "production-ready" with:
Release Date: July 15, 2025
Problem Solved: As AI-powered development tools become ubiquitous, codebases need documentation that machines can understand as well as humans. Traditional documentation formats are optimized for human readability but lack the structured metadata that AI systems need for optimal code comprehension.
Revolutionary Solution:
woaru docu ai command generates machine-readable YAML headerswoaru docu nopro - Human-friendly "Explain-for-humans" commentswoaru docu pro - Technical TSDoc/JSDoc documentationwoaru docu ai - Machine-readable YAML context headers (NEW!)--path-only, --local, and --git options--preview flag--force for CI/CD integrationExample AI Context Header Generated by WOARU:
/*
woaru_context:
file_purpose: "Core service class for secure API key management and environment configuration"
file_type: "service_class"
complexity_level: "medium"
main_responsibilities:
- "Secure storage of API keys in ~/.woaru/.env"
- "Environment variable management with automatic gitignore"
- "Multi-provider LLM configuration handling"
tech_stack:
language: "typescript"
framework: "node.js"
key_dependencies:
external:
- "dotenv: Environment variable loading"
- "fs-extra: File system operations"
internal:
- "src/config/constants.ts: Central configuration"
architectural_role: "utility_layer"
business_impact: "critical"
security_critical: true
generated_by: "woaru docu ai"
schema_version: "1.0"
*/
Release Date: July 14, 2025
Problem Solved: WOARU had scattered hardcoded values across the codebase making maintenance difficult and configuration inconsistent. Magic numbers, API URLs, and tool commands were duplicated throughout the code.
Revolutionary Solution:
no-var, eqeqeq, etc.)npx eslint, npm run lint) centralizedESLINT_RULES - All linter rules in one placeSOLID_THRESHOLDS - Configurable complexity limitsQUALITY_THRESHOLDS - Adjustable quality standardsTOOL_COMMANDS - Standardized CLI commandsAPI_ENDPOINTS - Central API URL managementBefore Refactoring (Scattered Hardcodes):
// ❌ Multiple files with hardcoded values
// CodeSmellAnalyzer.ts
rule: 'no-var'
severity: complexity > 15 ? 'error' : 'warning'
// SRPChecker.ts
const thresholds = { low: 8, medium: 15, high: 25 };
// cli.ts
baseUrl: "https://api.anthropic.com/v1/messages"
// QualityRunner.ts
await execAsync(`npx eslint "${filePath}"`);
After Refactoring (Centralized Configuration):
// ✅ Single source of truth in constants.ts
// All files now import from central config
rule: APP_CONFIG.ESLINT_RULES.NO_VAR
severity: complexity > APP_CONFIG.QUALITY_THRESHOLDS.COMPLEXITY_WARNING
const thresholds = APP_CONFIG.SOLID_THRESHOLDS.METHODS_PER_CLASS
baseUrl: APP_CONFIG.API.ANTHROPIC
await execAsync(`${APP_CONFIG.TOOL_COMMANDS.ESLINT.BASE} "${filePath}"`);
NO_VAR, EQEQEQ, PREFER_CONST, NO_CONSOLEHuman-Friendly Documentation (nopro):
// Explain-for-humans: This function calculates the total cost including tax for customer purchases.
function calculateTotal(items, taxRate) {
const subtotal = items.reduce((sum, item) => sum + item.price, 0);
const tax = subtotal * taxRate;
return subtotal + tax;
}
Technical Documentation (pro):
/**
* Calculates the total cost including tax for a collection of items
*
* @param {Array<Object>} items - Array of items with price property
* @param {number} taxRate - Tax rate as decimal (e.g., 0.08 for 8%)
* @returns {number} Total cost including tax
* @example
* // Calculate total for $100 worth of items with 8% tax
* const total = calculateTotal([{price: 100}], 0.08); // returns 108
*/
function calculateTotal(items, taxRate) {
const subtotal = items.reduce((sum, item) => sum + item.price, 0);
const tax = subtotal * taxRate;
return subtotal + tax;
}
# Generate human-friendly documentation for uncommitted changes
woaru docu nopro --local
# Generate technical documentation for all files in src/
woaru docu pro --path-only src/
# Preview documentation changes before applying
woaru docu nopro --git main --preview
# Force documentation without interactive confirmation
woaru docu pro --local --force
templates/prompts/
~/.woaru/config/woaru_llm_prompts/[provider]/
woaru setup llmwoaru analyze llm --prompt security_auditwoaru review git llm --prompt performance_optimizationwoaru review local llm --prompt refactoring_suggestionswoaru review path llm --prompt testing_strategyBefore (Limited & Inflexible):
❌ Single generic prompt for all analyses
❌ No focus control for specific concerns
❌ Same analysis whether checking security or performance
After (Dynamic & Powerful):
✅ Choose specialized analysis focus with --prompt flag
✅ Security audits find vulnerabilities, not style issues
✅ Performance analysis targets bottlenecks, not formatting
✅ Customize prompts for your team's specific needs
src/ai/PromptManager.ts handles all prompt operations
# Security-focused analysis
woaru analyze llm --prompt security_audit
# Performance optimization review
woaru review git llm --prompt performance_optimization
# Refactoring suggestions for specific files
woaru review path src/api --prompt refactoring_suggestions
# Test coverage analysis
woaru analyze llm --prompt testing_strategy
# List available prompts
ls ~/.woaru/config/woaru_llm_prompts/[provider]/
Release Date: July 14, 2025
Problem Solved: Users were confused by the old setup dialog asking for "environment variable names" instead of actual API keys, leading to setup failures and frustration.
Revolutionary Solution:
~/.woaru/.env
Before (Confusing & Error-Prone):
❓ "Environment variable name for API key:"
→ User types: "sk-proj-abc123..." (WRONG!)
→ Result: ❌ API key not found in all LLM commands
After (Intuitive & Bulletproof):
✨ "Bitte füge deinen OpenAI API-Key ein (beginnt mit 'sk-'):"
→ User types: "sk-proj-abc123..." (CORRECT!)
→ Result: ✅ API key stored securely! 🚀 Ready for immediate use!
src/config/ConfigManager.ts with enterprise-grade securityRelease Date: July 14, 2025
~/.woaru/) on first runRelease Date: July 14, 2025
ConfigManager class handles secure API key storage
~/.woaru/.env with 600 permissions (owner-only access).woaru/.envwoaru update for easy updates# Secure, one-click LLM setup:
woaru setup llm
# Update WOARU to the latest version:
woaru update
# Check stored API keys:
ls ~/.woaru/.env # (securely stored)
Release Date: July 14, 2025
woaru_[command]_report_[YYYY]-[MM]-[DD]_[HH]-[MM]-[SS]_[TZ].md~/.woaru/logs/woaru_actions.logwoaru logs command with filtering, export, and analysis capabilitieswoaru message latest now uses proper timestamp-based sorting for report deliverywoaru logs - View recent activity logs with filtering optionswoaru logs --tail 100 - Show last 100 log entrieswoaru logs --project /path - Filter logs by project pathwoaru logs --action analyze - Filter logs by specific action typewoaru logs --since 2024-01-01 - Time-based log filteringwoaru logs --export json - Export logs in JSON, CSV, or TXT formatwoaru logs clear - Clear all activity logs (with confirmation)woaru logs stats - Show log file statistics and active actionsFilenameHelper class for consistent report namingwoaru review commandsWOARU is an intelligent CLI tool that scans your actual codebase, detects issues, provides live quality monitoring, checks SOLID principles compliance, and ensures your project is production-ready with specific explanations based on what it finds in your code.
# Check what tools you have active:
npx woaru helpers
# Analyze your project:
npx woaru analyze
# Start intelligent monitoring with live quality checks:
npx woaru watch
# Perfect for Claude Code sessions:
# 1. Open any project in Claude
# 2. Type: npx woaru helpers
# 3. See all active tools and missing recommendations
# 4. Type: npx woaru watch (for continuous monitoring)
# Install once:
npm install -g woaru
# Then use anywhere:
woaru helpers
woaru analyze
woaru watch
woaru setup
WOARU supports 8 major programming languages with intelligent detection:
WOARU now includes comprehensive SOLID principles checking to make it a true "Tech Lead in a Box":
woaru review commandsWhen you run woaru watch, WOARU becomes your personal code quality guardian:
🚨 CRITICAL QUALITY CHECK FAILED 🚨
File: src/components/UserProfile.tsx
Tool: ESLint
──────────────────────────────────────────────────
/src/components/UserProfile.tsx
15:7 error 'userdata' is assigned a value but never used
23:1 error 'console' is not defined
45:10 error 'validateEmail' is defined but never used
✖ 3 problems (2 errors, 1 warning)
──────────────────────────────────────────────────
💡 Fix these issues before continuing development
Run the tool manually to see detailed output
WOARU automatically audits your project for production best practices:
🏗️ Production-Readiness-Audit:
🔴 CRITICAL - Muss behoben werden:
⚠️ WARNUNG: Kein Testing-Framework gefunden
→ Tests sind essentiell für Code-Qualität
📦 jest, vitest, @testing-library/react
🟡 HIGH PRIORITY - Sollte behoben werden:
💡 PRO-TIPP: Kein Error-Monitoring gefunden
→ Installiere Sentry für Production-Error-Tracking
📦 @sentry/react
🔵 MEDIUM - Verbesserung empfohlen:
🐳 Kein Dockerfile gefunden
→ Containerisierung vereinfacht Deployment
WOARU automatically detects your framework and provides specific recommendations:
woaru analyze # Deep project analysis with security audit + SOLID analysis
woaru setup # Auto-setup recommended tools
woaru helpers # Show active vs missing tools (★ most useful)
woaru watch # Start live quality monitoring with security (★ supervisor mode)
woaru review # Code review with universal directory analysis (★ REFACTORED v3.9.0!)
woaru docu # AI-powered code documentation generator
woaru commands # Show detailed command reference
# Git-independent directory analysis
woaru review local # Analyze current directory (no Git required)
woaru review local src/components # Analyze specific directory (no Git required)
woaru review local llm # AI analysis of current directory
# Git-specific analysis
woaru review local git # Analyze uncommitted changes (requires Git)
woaru review git # Analyze changes since main branch
woaru review path src/file.ts # Analyze specific files or directories
woaru version # Show current WOARU version
woaru version check # Check for updates from NPM registry
woaru update # Update WOARU to latest version
woaru status # Show supervisor status
woaru recommendations # Show current recommendations
woaru stop # Stop supervisor
woaru update-db # Update tools database
woaru logs # Show activity logs with filtering options (★ NEW!)
woaru message # Send reports from history to configured channels
woaru ignore <tool> # Ignore specific tools
woaru rollback <tool> # Rollback tool configurations
woaru logs # Show recent activity logs
woaru logs --tail 100 # Show last 100 log entries
woaru logs --project /path # Filter logs by project path
woaru logs --action analyze # Filter logs by action type
woaru logs --since 2024-01-01 # Time-based filtering
woaru logs --export json # Export logs (json, csv, txt)
woaru logs clear # Clear all activity logs
woaru logs stats # Show log statistics
woaru message all # Send all reports from history
woaru message latest # Send latest report (with timestamp sorting)
The woaru review command now features three specialized sub-commands for maximum flexibility and precision in code analysis:
# Analyze changes since main branch
woaru review git
# Compare against different branch
woaru review git --branch develop
# Generate JSON report for CI/CD
woaru review git --json
# Custom output file
woaru review git --output pr-review.md
# Analyze all uncommitted changes (staged + unstaged)
woaru review local
# Perfect before git commit
woaru review local --json
# Analyze specific directory
woaru review path src/components
# Analyze single file
woaru review path src/api/users.ts
# Multi-file analysis
woaru review path "src/**/*.tsx"
🔍 Analyzing changes since branch: main
📋 Found 3 changed files:
• src/components/UserProfile.tsx
• package.json
• src/api/users.ts
🔍 Running quality checks on changed files...
✅ Review report generated: woaru-review.md
📊 ⚠️ Gefunden: 2 Qualitäts-Probleme, 1 Produktions-Empfehlungen
# WOARU Code Review
**Änderungen seit Branch: `main`**
## 🚨 Kritische Qualitäts-Probleme
### `src/components/UserProfile.tsx`
**ESLint:**
- Zeile 23: 'userData' is assigned a value but never used
- Zeile 45: Missing dependency in useEffect hook
## 🏗️ SOLID Architecture Analysis
📊 **SOLID Score: 65/100** (3 Verstöße gefunden)
### 🔴 Single Responsibility Principle (3 Verstöße)
#### 🟡 HOCH (2)
**1. Klasse UserManager hat 18 Methoden**
📍 **Klasse:** UserManager:15
💡 **Problem:** Klassen mit vielen Methoden haben oft mehrere Verantwortlichkeiten
⚠️ **Auswirkung:** Schwer zu testen, zu verstehen und zu warten
🔨 **Lösung:** Teile die Klasse UserManager in kleinere, fokussierte Klassen auf
**2. Klasse UserManager importiert aus 4 verschiedenen Bereichen: database, http, validation, email**
📍 **Klasse:** UserManager:15
💡 **Problem:** Imports aus verschiedenen Bereichen deuten auf multiple Verantwortlichkeiten hin
🔨 **Lösung:** Separiere die verschiedenen Concerns in eigene Services
### 💡 SOLID-Empfehlungen
1. 🎯 1 Klassen mit zu vielen Methoden - teile diese in kleinere Services auf
2. 📦 1 Klassen mit zu vielen verschiedenen Concerns - verwende Dependency Injection
## 🟡 Empfehlungen zur Produktionsreife
### `package.json`
**Du hast `react-spring` hinzugefügt**
→ Kein Error-Monitoring konfiguriert. Erwäge @sentry/react für Production-Apps
📦 `@sentry/react`
woaru review is Game-ChangingNever forget what WOARU can do! The new woaru commands provides comprehensive documentation for every command:
# Show complete command reference
woaru commands
📚 WOARU Command Reference
══════════════════════════════════════════════════
🔍 woaru analyze
Description: Comprehensive project analysis including security audit
Usage: woaru analyze [options]
Purpose: Performs a full analysis of your project including code quality,
security vulnerabilities, production readiness, and tool recommendations.
Perfect for understanding the overall health of your codebase.
🔄 woaru review <subcommand>
Description: Code review and analysis tools
Usage: woaru review <git|local|path> [options]
Purpose: Focused analysis tools for code reviews. Choose from git diff
analysis, uncommitted changes review, or specific file/directory analysis.
Subcommands:
• woaru review git
Purpose: Analyzes changes between your current branch and a base branch...
• woaru review local
Purpose: Reviews your uncommitted changes before you commit them...
• woaru review path
Purpose: Focused analysis of specific files or directories...
The woaru watch command has been completely reengineered for bulletproof reliability:
# Now runs indefinitely without timeouts in ANY environment
woaru watch
✅ WOARU Supervisor started successfully!
📍 Project: /your/project/path
👁️ Starting continuous monitoring...
👁️ WOARU is watching your project - Press Ctrl+C to stop
⏱️ Watching... (5s elapsed, 14:32:15)
⏱️ Watching... (10s elapsed, 14:32:20)
📊 Status: 42 files monitored, Health: 85/100
👁️ WOARU is watching your project - Press Ctrl+C to stop
Unlike other tools that guess, WOARU scans your actual code and provides evidence:
ESLint recommended because:
→ 12 console.log statements found in src/
→ 3 unused variables detected
→ Inconsistent formatting in 8 files
Prettier recommended because:
→ Mixed quote styles detected
→ Inconsistent indentation found
Jest recommended because:
→ No test files found
→ React components without tests: 5
WOARU is specifically optimized for Claude Code and AI-assisted development:
WOARU works best in proper terminal environments:
✅ Recommended:
❌ Not Recommended:
Why? Long-running commands like woaru watch require persistent process management that browser environments can't provide reliably.
WOARU works out of the box with intelligent defaults:
The supervisor mode intelligently monitors your project:
WOARU is the only tool that combines:
From setup to deployment - WOARU has you covered. 🚀
WOARU is community-driven. Help us expand language support and tool recommendations:
src/database/tools.jsonsrc/plugins/MIT License - Use freely in commercial and open-source projects.
WOARU v1.1.0 - Your Universal Development Companion 🚀
woaru review git|local|path for ultra-precise analysiswoaru commands shows complete referenceWOARU ist jetzt ein vollwertiger Security-Experte mit Snyk-Integration in allen drei Kernfunktionen:
woaru review)🔒 Running security analysis with Snyk...
🚨 SECURITY ALERT: Found 2 critical and 5 high severity vulnerabilities!
# Detaillierte Sicherheitsberichte in Markdown-Review-Reports
## 🚨 KRITISCHE SICHERHEITS-PROBLEME (gefunden von Snyk)
- 🔴 SQL Injection in express-validator@6.14.0
- 🔴 Prototype Pollution in lodash@4.17.20
woaru watch)📦 package.json wurde verändert - führe Sicherheitsanalyse durch...
🚨 SECURITY ALERT: 1 kritische Sicherheitslücke in neuer Dependency gefunden!
🔴 Kritische Schwachstelle in newly-added-package@1.0.0
woaru analyze)🔒 SECURITY ANALYSIS
────────────────────────────────────────
Security Health Score: 75/100
🚨 Total Issues: 7
├─ Critical: 2
├─ High: 3
├─ Medium: 2
└─ Low: 0
WOARU ist jetzt mit einem Live Tools Database System ausgestattet, das sich automatisch mit den neuesten Ecosystem-Daten aktualisiert:
💡 WOARU tools database updated successfully
📊 45 tools across 6 categories
🆕 Version: 1.2.3 (2025-01-11T14:30:00Z)
⚠️ WARNUNG: Das von dir genutzte Tool eslint-config-airbnb ist veraltet
→ Der empfohlene Nachfolger ist @typescript-eslint/eslint-plugin
→ Migration: npm install @typescript-eslint/eslint-plugin
Tools werden jetzt intelligent priorisiert basierend auf:
Das Live Tools Database System macht WOARU zur ersten wirklich zukunftssicheren Development-Tool-Empfehlung - immer aktuell, immer relevant! 🎯
WOARU wurde massiv erweitert um genaue Problem-Lokalisierung und detaillierte Begründungen zu liefern:
🔍 DETAILLIERTE SICHERHEITSPROBLEME:
──────────────────────────────────────────────────
📦 SNYK-Befunde:
KRITISCH (2):
1. Remote Code Execution in lodash
📍 Paket: lodash@4.17.20
🆔 CVE: CVE-2021-23337
💡 Problem: Command injection vulnerability allows remote code execution
🔧 Lösung: Upgrade lodash to version 4.17.21
2. SQL Injection in sequelize
📍 Datei: src/models/User.js:45
💡 Problem: Unsanitized user input allows SQL injection attacks
🔧 Lösung: Use parameterized queries and update to latest version
🏗️ PRODUCTION READINESS
────────────────────────────────────────
📋 SECURITY
1. Missing SSL/TLS configuration in Express app
📍 Betroffen: src/server.js:15, src/app.ts:23
📦 Pakete: helmet, express-ssl-redirect
💡 Prüfung: HTTPS enforcement check for production security
🔧 Lösung: Install helmet middleware and enforce HTTPS in production
2. No Content Security Policy headers detected
📍 Betroffen: src/middleware/security.js
💡 Prüfung: CSP headers prevent XSS and injection attacks
🔧 Lösung: Configure CSP headers using helmet.contentSecurityPolicy()
💡 **Problem:** 1 unbenutzte Variablen/Imports - können entfernt werden,
1 TypeScript-spezifische Probleme, 2 weitere Code-Qualitätsprobleme
📋 **Gefundene Probleme:**
1. Line 23:45 - ERROR: 'api_key' is assigned a value but never used (Rule: @typescript-eslint/no-unused-vars)
2. Line 10:1 - ERROR: 'console' is not defined (Rule: no-undef)
🔧 **Lösungsvorschläge:**
1. Entferne unbenutzte Variablen oder füge "_" vor den Namen hinzu
2. Ersetze console.log durch Logger oder entferne Debug-Ausgaben
📄 **Code-Kontext:**
src/api/users.ts:23:45 23:45 error 'api_key' is assigned a value but never used @typescript-eslint/no-unused-vars 10:1 error 'console' is not defined no-undef
### 🚀 **Key Enhancements Implemented**
#### **1. 📍 Precise Location Information**
- **Package locations**: `📍 Paket: package-name@version`
- **File locations**: `📍 Datei: path/file.js:line`
- **CVE identifiers**: `🆔 CVE: CVE-2023-1234`
- **Affected files**: Lists all files impacted by each issue
#### **2. 💡 Detailed Problem Explanations**
- **Why it's problematic**: Clear explanation of the security/quality risk
- **Impact assessment**: What could happen if the issue is not fixed
- **Context-aware descriptions**: Tailored explanations based on issue type
#### **3. 🔧 Actionable Solution Recommendations**
- **Specific fix commands**: Exact npm/package commands to run
- **Step-by-step guidance**: Clear instructions for remediation
- **Alternative solutions**: Multiple approaches when applicable
#### **4. 🎯 Smart Categorization System**
```bash
Enhanced ESLint Analysis Categories:
- Syntax errors: Critical parsing issues
- Unused variables: Clean-up opportunities
- Formatting issues: Style and consistency problems
- Security issues: Potential vulnerabilities (🚨 Critical priority)
- Import/Export problems: Module resolution issues
- TypeScript-specific: Type safety improvements
All problem explanations, solutions, and recommendations are provided in German for maximum accessibility to German-speaking development teams.
woaru analyze - Now shows detailed security findings with precise locations and explanationswoaru review git/local/path - Enhanced reports with code context and fix suggestionsDiese Erweiterungen machen WOARU zum ultimativen Code-Quality-Experten der nicht nur Probleme findet, sondern auch genau erklärt:
WOARU v1.1.1 - Jetzt mit chirurgischer Präzision für Problemdiagnose! 🎯🔬
FAQs
Universal Project Setup Autopilot - Analyze and automatically configure development tools for ANY programming language
The npm package woaru receives a total of 7 weekly downloads. As such, woaru popularity was classified as not popular.
We found that woaru demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.