Roadmap

Necro is in active development. This page is the honest line between what works now and what’s planned — nothing on the “planned” list is available yet.

Available today

• Semantic dead-code detection for TypeScript (compiler API via ts-morph).
• Confidence tiers: certain / likely / maybe.
• Evidence chains on every finding.
• The test-only verdict.
• Test-runner awareness (jest / vitest).
• Coverage ingestion (lcov) folded into the evidence chain and tiers.
• Safe fix: necro fix removes certain-dead code — preview by default, --write to apply, with a dirty git-tree guard.
• Complexity detectors: nesting, cyclomatic, cognitive, and god-function (tree-sitter), with configurable thresholds.
• Risk hotspots: CRAP score (complexity × coverage) weighted by git churn, ranked worst-first.
• Duplication: Type-2 (renamed) copy-paste clone detection (tree-sitter, no jscpd), clamped to function boundaries.
• LLM triage: necro triage resolves the quarantined maybe findings (opt-in, Anthropic API).
• LLM refactors: necro refactor proposes god-function splits and extract-duplicate, each verified (typecheck + tests) in a scratch git worktree.
• necro explain: traces why a symbol is alive, test-only, or dead (the reachability witness chain), with an optional --narrate LLM plain-English layer (opt-in, needs an API key, degrades gracefully without one).
• necro verify-removal: per-symbol build-green check — plans a symbol’s removal and verifies it independently in a throwaway git worktree before you apply it.
• MCP server: necro mcp exposes four read-only tools (necro_scan, necro_verify, necro_verify_removal, necro_explain) so AI agents can call necro’s verdicts and verify edits in isolation.
• Output modes: default terminal, --json, --top N, and SARIF 2.1.0 (--sarif <file>) for GitHub code-scanning.
• CI gating: --fail-on <high|medium|low> exit gating plus a composite GitHub Action.
• Framework plugins: Next.js (roots App-Router entry exports) and monorepo workspace-edge resolution.

Planned

None of the following is implemented yet.

Area	Planned capability
Accuracy	istanbul-JSON coverage (lcov ships today); cascading re-analysis after a fix
Detectors	Cross-language & fuzzy (Type-3) clones; god-function responsibility-clustering
Scoring	Per-line & recency-weighted churn, ownership weighting
Fixes	test-only auto-apply (report-only today); cascading re-analysis after a fix
Frameworks	NestJS (DI decorators), template-based plugins
Languages	Python (the polyglot bet — detectors reused, new symbol-graph adapter)

Distribution

Necro ships as @manehorizons/necro on npm — npm install -g @manehorizons/necro or npx -y @manehorizons/necro. See the installation guide.