shouldiuse.io

Categories

VERDICT

Repomix (by yamadashy) Review

Worth it

Should I use Repomix (by yamadashy)?

I'm a software engineer based in Japan. I love building open-source tools for developers. - yamadashy.github.io

· 3 days ago

Developers who feed codebases to AI tools use this free, proven packer and cut token costs. Non-developers and teams that need vendor support do not buy this.

Confidence

Medium. Based on 25 public sources. The pasted URL is a personal homepage, so this report reviews Repomix, yamadashy's main project.

Ratings

  • Value for money
  • Ease of use
  • Feature depth
  • Support quality
  • Security posture

Pricing

$0

Open source (MIT)

ModelNot disclosed
Monthly feesNot disclosed
HardwareNot disclosed
Free tierYes

Best for

  • Devs feeding repos to Claude, ChatGPT, DeepSeek
  • Teams cutting AI token costs
  • MCP and Claude Code workflows
  • Open-source code analysis

Not for

  • Anyone packing private repos without reviewing output for secrets
  • Teams wanting SLAs or paid vendor support
  • Non-developers; this is a CLI tool
  • Buyers comparing commercial AI coding suites

Gotchas - check before you buy

high

Packing a full repo bundles secrets into one file you send to AI providers.

medium

CVE-2026-49988, medium severity, exposes sensitive info through attach_packed_output. Update first.

medium

Tool costs nothing, but huge packed outputs raise your AI provider token bills.

low

No paid support. You depend on GitHub issues and a Discord server.

Pros and cons

Pros

  • Free, MIT-licensed, no paid tiers.
  • 28,499 GitHub stars and 1,542 forks.
  • Runs as CLI, website, browser, and MCP server.
  • Packs local or remote repos into one AI-friendly file.
  • Users call it a good, straightforward tool.

Cons

  • Solo side project; bus factor of one.
  • CVE-2026-49988 exposed secrets via MCP mode in 2026.
  • Open bugs remain, including --split-output packing errors.
  • Large repos still need manual filtering to fit context windows.

Sources & method

- 10 sources - One medium CVE disclosed in 2026; a recent registry scan reports no open issues.

official x2review x4security x2news x2
  • CVE-2026-49988, Exposure of sensitive information through attach_packed_output in the repomix MCP package. Rated medium severity and tied to a local file-read boundary.

Key stats

  • Value for money: 5/5

    Rating

  • $0

    Starting price

  • 10

    Sources

  • Analyzed

  • Value for money: 5/5. Free, MIT, full features
  • Ease of use: 4/5. One npx command; users call it straightforward
  • Feature depth: 4/5. CLI, web, browser, MCP, filters, token counts
  • Support quality: 3/5. Solo maintainer, GitHub and Discord only
  • Security posture: 3/5. One medium CVE in 2026
  • 28,499 GitHub stars Strong open-source adoption
  • $0 Price MIT license, no paid tiers
  • Yes Free tier Entire tool is free
  • 1,542 GitHub forks Active community

Pricing

Open source (MIT)

$0

  • CLI, web, browser, and MCP versions
  • Community support via GitHub and Discord

Security

One medium CVE disclosed in 2026; a recent registry scan reports no open issues.

  • CVE-2026-49988Exposure of sensitive information through attach_packed_output in the repomix MCP package. Rated medium severity and tied to a local file-read boundary.⁸

What users say

Developers praise it as a straightforward, token-saving way to give AI tools full codebase context.

“I have found Repomix[1] to be a good and straightforward tool”
Hacker News
“I've come upon repomix which gets your entire repo and puts it in a MD fil”
Reddit, r/ChatGPTCoding
“Pack smarter, Repomix (github.com/yamadashy/repomix) MIT, around 28k stars.”
Reddit, r/WebAfterAI

Alternatives

Compare Repomix (by yamadashy) with each alternative.

  • gitingest

    Guess: free web tool that turns a GitHub repo into one prompt.

    Repomix (by yamadashy) vs gitingest

  • code2prompt

    Guess: similar CLI that converts codebases into LLM prompts.

  • Aider

    Terminal AI pair programmer that reads repo context itself.

Full analysis

Based on 25 public sources. The pasted URL is a personal homepage, so this report reviews Repomix, yamadashy's main project.

Free MIT tool that packs repos into AI-friendly files. 28k stars. Great for LLM work, useless if you never share code with AI.

Methodology

Based on 25 public sources. The pasted URL is a personal homepage, so this report reviews Repomix, yamadashy's main project.

Read how a report is made.

Sources

  1. Repomix | Pack your codebase into AI-friendly formatsrepomix.com
    official
  2. yamadashy/repomix on GitHubgithub.com
    official
  3. Repomix Alternatives and Reviewslibhunt.com
    review
  4. HN: Gemini $30/month thread mentioning Repomixnews.ycombinator.com
    review
  5. Is repomix safe? : r/ChatGPTCodingreddit.com
    review
  6. 5 open-source repos that cut agent token burnreddit.com
    review
  7. CVE-2026-49988 Detail - NVDnvd.nist.gov
    security
  8. CVE-2026-49988 advisory (GitLab)advisories.gitlab.com
    security
  9. How Repomix reached 5000 GitHub starszenn.dev
    news
  10. Tool share: Repomix, 28,499 starsfacebook.com
    news

Add this review to your site

Repomix (by yamadashy) earned a Worth it check.

Put the badge on your site, pricing page, or docs.

Visitors see an independent review.

The link points here, and search engines follow it.

This is the badge visitors see on your site.

Worth it Repomix (by yamadashy) Independent review on Should I Use It

Paste one snippet. Keep the link as it is. A nofollow tag stops search engines from following it.

Rate this review

Anonymous. You can change your vote.

Loading votes…

Comments

One queue. No nested comments. Give a display name first. Limit: 200 words per comment and 7 comments per day. You can edit or delete yours.

Save a name to write a comment.

0 / 200 words

No comments yet.