repo-health

Repo Health

Fast, scripted, read-only signal scans: tech-debt markers, skipped tests, CI duration/flake, mobile release lag. Each scan is one bundled script emitting parseable output. This is the cheap input layer for prioritization (e.g. a project survey-work); it makes no writes and files no issues.

Scans

Tech debt markers + skipped tests

SCAN_PATHS="apps/ packages/" \
EXCLUDE_PATHSPECS="packages/db/src/migrations/** src/generated/**" \
bash ${CLAUDE_PLUGIN_ROOT}/skills/repo-health/scripts/pull-tech-debt.sh

• SCAN_PATHS defaults to the whole tracked tree; pass source dirs to cut noise.
• EXCLUDE_PATHSPECS for generated/migration dirs the caller knows about. Pass bare paths — the script adds the :(exclude) magic itself. A leading :(exclude) is stripped for back-compat with configs written against the old contract, but only one: doubling it produces a pathspec git accepts and silently ignores. Values reach git literally (the loop is fenced with set -f), so a ** here is a git pathspec, not a shell glob. An element that is unusable after the strip — a lone :(exclude), or a remainder still starting with : — is dropped with a warning on stderr rather than passed through, because a bare :(exclude) is an empty pattern git reads as "exclude everything".
• Output sections: todo-markers (capped 200), skipped-tests (capped 100), todo-by-dir (top 20 directories by marker count).

CI duration + flake

WORKFLOW=ci.yml bash ${CLAUDE_PLUGIN_ROOT}/skills/repo-health/scripts/pull-ci-health.sh

Emits JSON: {sample, median_min, p90_min, flake_runs, flake_shas}. REPO defaults to cwd; LIMIT defaults to 50 runs. A "flake" is the same (headSha, event) failing then passing — the event key deliberately excludes merge-queue false positives (explained in the script header; don't simplify it away).

Dependency exposure + remediation

bash ${CLAUDE_PLUGIN_ROOT}/skills/repo-health/scripts/pull-dependency-exposure.sh