Developer Builds CodeGraph Tool to Map Codebase Dependencies Before Changes Break Them

·3 views

A developer has built CodeGraph, an open-source tool that parses any public GitHub repository and visualizes its functions as an interactive knowledge graph. The tool uses tree-sitter to extract every function definition and call relationship, storing them in Neo4j AuraDB to leverage its native graph querying capabilities. Users can paste a GitHub URL into the web interface and instantly see which functions depend on one another, helping identify what might break before making code changes. The stack combines a Python and FastAPI backend with a Next.js 15 TypeScript frontend, and a Groq-powered AI layer for additional insights. CodeGraph was built for the HACKHAZARDS '26 hackathon and is available as a live demo on Vercel with the source code published on GitHub.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

France mandates e-invoicing for all VAT-registered businesses from September 2026

Starting 1 September 2026, all VAT-subject businesses established in France must be able to receive structured electronic invoices through the country's new national platform network. Large and mid-sized companies must also begin issuing e-invoices on that date, while SMEs and micro-enterprises have until 1 September 2027 to comply with issuance requirements. France's 2026 Finance Law significantly raised non-compliance penalties, increasing the fine for failing to issue an e-invoice from €15 to €50 per invoice, capped at €15,000 annually. Accepted invoice formats include UBL 2.1, UN/CEFACT CII, and Factur-X, all compliant with the EN 16931 standard, and transmission must occur via accredited platforms rather than through the Peppol network used in some other European mandates. Developers building B2B SaaS products for French customers will need to integrate e-invoicing capabilities into their platforms ahead of the deadlines.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

MargIQ tool routes AI workflows to right-sized models based on traffic evidence

A developer has launched MargIQ, a server-side tool designed to help engineers optimize AI model selection at the individual workflow level rather than applying a single model across an entire application. The tool analyzes recurring AI workflows in production traffic and evaluates whether a lower-cost model is appropriate for each, based on complexity, risk, and observed behavior. MargIQ begins in a report-only mode, surfacing potential cost savings without altering live routing until the user opts in. It withholds recommendations when evidence is insufficient or when quality requirements remain ambiguous, defaulting to the originally requested model. Available via npm, MargIQ is compatible with existing model-provider credentials and is currently seeking feedback from engineers and founders running production AI systems.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

10 Common Java Interview Questions on Strings and Arrays Explained

A technical guide published on DEV Community covers ten foundational Java questions focused on strings and arrays. The topics include the differences between String, StringBuilder, and StringBuffer, as well as why String objects are immutable in Java. The guide also addresses the String pool concept, string comparison using == versus .equals(), and common operations like reversing a string or checking for palindromes. Additional questions cover converting strings to character arrays, finding the largest element in an array, sorting arrays, and distinguishing between arrays and ArrayLists. The resource appears aimed at developers preparing for Java interviews or refreshing core language concepts.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Critical RCE Flaw in LiteLLM AI Gateway Actively Exploited, CISA Warns

BerriAI disclosed CVE-2026-42271 on May 8, 2026, a command-injection vulnerability in LiteLLM, a widely used open-source AI gateway, affecting all versions from 1.74.2 up to but not including 1.83.7. The flaw, rated CVSS 8.8, resides in two MCP-server preview endpoints that allow authenticated users to execute arbitrary OS-level commands on the host without any sandboxing. By June 9, 2026, CISA had added the vulnerability to its Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. When chained with a separate Starlette host-header bypass flaw, CVE-2026-48710, the vulnerability enables unauthenticated remote code execution for anyone able to reach the LiteLLM HTTP interface. Users are urged to upgrade to version 1.83.7 or later immediately and to restrict exposure of the affected endpoints until both vulnerabilities are fully patched.

0 comments Read more at DEV Community