Rubra Candela
Changelog
0.1.0
First public release — 8 August 2026.
The first build anyone outside the project has been able to run. It does the whole job end to end: point it at a folder, see the shape of the code, ask it questions, get answers that cite the files they came from.
Reading a project
- Resolves imports the way a bundler does, including
@/path aliases, npm workspaces and Python packages, rather than matching text. - Parses TypeScript, JavaScript, JSX, TSX, Python, JSON, Vue and Svelte for imports. Files in other languages still appear on the graph and can be read and explained; they are simply not traced for dependencies.
- Watches the folder while it is open, so editing a file in your own editor updates the graph without a rescan.
- Very large repositories are truncated at a scan limit rather than freezing, and the app says so when it happens.
The graph
- Force-directed layout of every file and every import, with zoom, pan and search.
- Node size is lines of code; colour is complexity.
- Selecting a file highlights everything it touches, in both directions.
Explanations and investigation
- Plain-language explanation of any file: what it is for, what it is responsible for, how it connects, and what is risky about it.
- Open-ended investigation — loopholes, broken ends, unfinished work — answered by reading the actual code, with the files it consulted listed as evidence.
- Built-in code viewer with syntax highlighting, so a file can be read without leaving the app.
- Everything runs through a language model on your own machine, via Ollama. Questions and answers are cached locally and never transmitted.
Analysis
- Circular dependency detection.
- Dead code: files nothing imports.
- Complexity and size hotspots.
- Git history — which files churn, who touched them last, where recent commits concentrated.
- Full-text search across the project, with results linked to the graph.
Accounts and privacy
- Analysis needs no account. Signing up sends your name, email address and country once, and nothing after that.
- Passwords are hashed on your machine with scrypt and never leave it.
- The privacy policy enumerates every network connection the application makes. There are four, and three of them are optional.
Known limitations
- Windows only. The application is built to run on macOS and Linux, but signed and notarised builds are not ready.
- Unsigned. Windows SmartScreen will report an unknown publisher. The installer is safe to run, and you can verify it against the SHA-256 published on the download page, but the warning is real and will appear until there is a code-signing certificate.
- Ollama is a separate install. Bundling it would triple the download and conflict with any copy you already have.
- No plugin API, no team features, no remote repositories. Local folders only.
Rendered at build time from content/CHANGELOG.md —
checked against the installer this site is serving.