Dependency graph
Every import resolved and drawn, including path aliases, npm workspaces and Python packages. Zoom, search and follow one file to see everything it touches.
Rubra Candela is a reader for code you didn't write. It maps every file and every import as a graph you can zoom, search and follow, then explains any part of it in plain language using a language model running on your own machine — so your source code never touches a network. Free, for Windows 10 and 11.
The dependency graph — size is lines of code, colour is complexity. Screenshots at rubracandela.com
Most tools that read your codebase send it to a server. This one has no server to send it to.
Every capability below is engineered against the same checklist we apply to client systems.
Every import resolved and drawn, including path aliases, npm workspaces and Python packages. Zoom, search and follow one file to see everything it touches.
Any file explained: what it is for, what it is responsible for, how it connects, and what is risky about it — written by the model, not pulled from a template.
Ask for loopholes, broken ends or unfinished work. It reads the real code and answers with evidence, naming the files it used so you can check its working.
Circular dependencies, unused files, oversized modules and the hotspots most likely to hide defects — recolour the graph to ask a different question.
Which files churn, who touched them last, and where recent commits concentrated. Edit a file in your own editor and the graph rebuilds as you work.
No repository URL, no upload, and no account needed to analyse. The model runs on your own machine, so your source, graph and questions never leave it.
Rubra Candela is not a side project. It goes through the same five stages as every client engagement.
Attack surface mapped and mitigations agreed before any feature work begins.
A written design doc, reviewed by a specialist who did not write it.
Automated tests, SAST gates and dependency audits on every pull request.
Our own red team attacks it before release — the same engagement clients pay for.
Monitored, patched and improved continuously, with a real on-call rotation behind it.
If yours is not answered here, email us and a person will reply.
Sign up at rubracandela.com — or talk to the team that built it.