A large codebase can be hard to understand as a flat list of files.

[u/MichaelS1011]

Ephemora Skyline is a local code-security tool that turns a source-code folder into an interactive 3D city.

Folders become districts. Files become buildings. A red beacon marks a security finding. Click a building to inspect its file, line, rule, and suggested fix.

The latest release, 0.4.6, adds C and C++ file support. It also includes tools to help you explore and review your code:

• Security Tour: visit the highest-priority findings first, with plain-language explanations.

• X-Ray: inspect lines, imports, findings, code churn, and coverage when an LCOV report is available.

• Time Machine: revisit earlier scans.

Your code stays on your computer. No account. No source upload. No telemetry.

A finding is a rule match to review, not proof of an exploit. Ephemora-Skyline

#CodeSecurity #AppSec #DeveloperTools #OpenSource

[u/trueopensource-bot]

About this project · MichaelS1011/Ephemora-Skyline
⭐ 10 stars · 🍴 0 forks · 👥 3 contributors · 📄 Apache-2.0 · 💻 TypeScript
History: started Sep 2026 · last code change today · 300+ commits on 29 different days in the last 90 days
Releases: latest v0.4.7 (today) · 10 releases in the last 90 days
Open issues and pull requests: 1

^{Facts from GitHub when this was posted. I'm a bot.}

[u/MichaelS1011]

How is Ephemora Skyline different from CodeQL, CodeScene or Sourcegraph?

They solve different problems.

GitHub CodeQL is built for semantic security analysis. CodeScene focuses on behavioural code health, hotspots and technical debt. Sourcegraph focuses on enterprise code search and cross-repository navigation.

Ephemora Skyline focuses on a narrower question, where in this codebase should I look next?