Repomix: Pack a Whole Repo Into One File for AI (GitHub, Scanned)

Repomix fixes a small, constant annoyance: getting a codebase into a chat window. Run it in a project folder and it writes repomix-output.xml, a single file with the directory tree and the contents of every file, ready to upload to Claude, ChatGPT, Gemini or any other model. It respects .gitignore, prints token counts per file and in total so you know whether the result fits a context window, and can write Markdown or plain text instead of XML.

The options go well beyond concatenation. --compress uses Tree-sitter to keep signatures and structure while dropping function bodies, cutting tokens; --remote packs a GitHub repository without cloning it yourself; --include and --ignore take glob patterns, and a list of files can be piped in. It runs Secretlint over everything and leaves out files that match known credential formats, and it can run as an MCP server so an agent can pack code on its own.

Repomix is MIT licensed, written in TypeScript by the developer yamadashy, and has about 28,700 stars. There is also a web version at repomix.com, and Chrome and Firefox extensions that add a Repomix button to GitHub repository pages.

• Repository: github.com/yamadashy/repomix
• Licence: MIT (MIT License)
• Language: TypeScript. Stars: 28.7K. Forks: 1,561. Last push: Oct 3, 2026.
• Scan: safe, Oct 3, 2026, commit 8d64291

Who it is for

Anyone who asks AI models about code too big to paste in one go: developers after a review or refactoring plan for a whole project, people exploring an unfamiliar repository, and anyone working in a chat interface rather than an IDE agent.

Getting started

1. Run it in any project folder, no install needed

npx repomix@latest

2. Or install it for repeated use (Homebrew, yarn and bun also work)

npm install -g repomix

3. Pack a GitHub repository without cloning it

repomix --remote yamadashy/repomix

4. Shrink the output to signatures and structure

repomix --compress

Look at the output before uploading it anywhere. Secretlint catches files that match known credential formats, not every secret, and the packed file is your whole codebase in one place. In MCP mode the server can read any path your user can, unless you start it with --sandbox.

Safety scan

We cloned yamadashy/repomix at commit 8d64291 on Oct 3, 2026 and ran the checks described on the GitHub Tools page: credential patterns, decode-and-execute code, install-time scripts, committed binaries, risky CI workflows, every host the code talks to, known vulnerabilities in pinned dependencies, and project hygiene. A person read every hit. This is what we found.

• No bare-IP URLs or committed binaries across 1,182 files and about 148,000 lines, half of it documentation in many languages. The four secret hits are in tests/core/security/workers/securityCheckWorker.test.ts: a fake GitHub token, Slack tokens and a private key that exist to prove Secretlint catches them.
• The one pattern hit is the devcontainer Dockerfile installing Claude Code with its official curl | bash installer, for contributors who develop inside the container. Install hooks are a build step on prepare and the browser extension's wxt prepare.
• The CLI's package-lock.json pins 404 packages with five advisories (3 high, 2 moderate), all denial-of-service bugs in brace-expansion, braces and fast-uri, triggered by malicious glob patterns or URLs rather than by code you pack. The other 20 sit in the repomix.com website's client and server and the browser extension, mostly undici, Vite and markdown-it.
• Remote packing clones the repository you name into a temporary folder and only reads it. The MCP server can read any path your user can unless you start it with --sandbox, which the README explains.
• 21 workflows. The single pull_request_target one, jev-pr-labeler.yml, has no permissions by default, never checks out the PR and only asks the API for the changed-file list. 24 of 28 third-party actions are pinned to commits. Security policy, CodeQL, Renovate, licence, contributing guide and code of conduct present.

What the scanner counted

The raw findings

Every hit the scanner wrote out, with a link to the exact line at the scanned commit. Secrets candidates are redacted.

By the numbers

Lines by language: Markdown 72K, TypeScript 62K, JSON 6,608, Vue 3,665, YAML 2,592, JavaScript 622.

Questions

Is Repomix free?

Yes. It is MIT licensed and free, as are the repomix.com web version and the browser extensions. It makes no model calls of its own; you paste or upload the output to whichever AI service you already use.

Will Repomix put my API keys in the output?

It tries not to. Secretlint scans every file and leaves out those that match known credential formats, and anything listed in .gitignore is skipped. Neither is a guarantee, so for private code skim the file list Repomix prints and use --ignore for anything sensitive.

Does Repomix work on large repositories?

It packs them, but the result can exceed a model's context window. The token counts show which files are heaviest, --compress, --include and --ignore trim the output, and --split-output breaks it into several files.

This post is part of GitHub Tools, where every repository is cloned and scanned before it is written up. The scan is a snapshot of one commit on one day; the repository has moved on since, so check it before you install.