Changelog

Re-review on push + GitHub status checks

  • →New pushes to open PRs automatically dismiss the old review and trigger a fresh one
  • →BugLens now posts a pass or fail commit status on every reviewed commit
  • →Re-review header shows which push triggered the new analysis

.buglens.yml per-repo config

  • →Add a .buglens.yml file to your repo root to configure strictness, ignore patterns, and max files
  • →Repo-level config overrides dashboard settings
  • →Supports: strictness, ignore, shadow, max_files

OSS Program launched

  • →6 months of Pro access free for qualifying open source projects
  • →Application form with GitHub repo validation
  • →Eligibility: public repo, OSI license, active maintainer

Expanded import typo detection

  • →KNOWN_PACKAGES expanded from 13 to 100+ popular packages
  • →Now covers React, Next.js, testing libraries, UI frameworks, databases, auth, AI SDKs, and more

Editable settings page

  • →Display name and bio are now editable from Settings
  • →Email notification toggle — opt out of review summary emails
  • →Changes saved via Server Actions with instant feedback

Email notifications

  • →Review summary emails sent after every PR review
  • →Includes decision (approve/request changes), finding count, risk summary
  • →Links directly to the review in the BugLens dashboard

DodoPayments billing

  • →Pro plan billing via DodoPayments (live mode)
  • →Webhook-based subscription management
  • →Usage limits enforced per tier: Free (10/mo), Pro (unlimited)

Deterministic rule engine

  • →8 hardcoded rules that run on every PR regardless of AI output
  • →Detects: hardcoded secrets, eval/new Function, shell injection, suspicious packages, critical TODOs, variable name mismatches, missing await, import path typos
  • →Levenshtein distance used for fuzzy variable and import matching

Encrypted token storage

  • →GitHub installation tokens encrypted at rest with AES-256-GCM
  • →Webhook delivery idempotency — duplicate GitHub events safely ignored

Initial release

  • →GitHub App installation flow
  • →AI-powered review on PR open using top-tier language models
  • →Inline comments with severity scores (HIGH / MEDIUM / LOW)
  • →APPROVE / REQUEST_CHANGES decision on each PR
  • →BugLens dashboard with review history
  • →Shadow mode — run reviews without posting to GitHub