minikin/cargo-crap

Change Risk Anti-Patterns (CRAP) metric for Rust projects

What it solves

cargo-crap is a tool for Rust developers to identify "risky" code. It targets functions that are both highly complex (hard to read and maintain) and poorly tested (low coverage), which are the most likely places for bugs to hide.

How it works

The tool calculates the CRAP (Change Risk Anti-Patterns) metric. This is a formula that combines cyclomatic complexity (CC) and test coverage into a single score.

  • Low Score: A simple, fully tested function scores a 1.0.
  • High Score: As complexity increases and coverage decreases, the score rises.
  • Hard Limit: If a function's complexity is too high (roughly above 30), it is flagged as risky regardless of how much test coverage it has.

It integrates with coverage tools like cargo-llvm-cov to ingest LCOV reports and can be used in CI/CD pipelines to fail builds if code risk exceeds a certain threshold.

Who it’s for

Rust developers and teams who want to maintain high code quality and ensure that complex logic is not left untested.

Highlights

  • CI Integration: Can gate builds using --fail-above or --fail-regression to prevent risk from increasing.
  • Baseline Comparison: Supports comparing current results against a previous JSON baseline to track improvements or regressions.
  • ** uma Duplicate Detection:** Can identify candidate duplicate functions based on structural similarity.
  • Multiple Output Formats: Supports human-readable tables, JSON, GitHub annotations, SARIF, and Shields.io badges.

Related

  • Project
    camel-ai/crab

    CRAB is a Python-centric framework for building and evaluating multimodal embodied AI agents across diverse environments like Docker, VMs, and physical machines.

  • Project
    tirth8205/code-review-graph

    A tool that builds a structural graph of your codebase to provide AI assistants with precise context, significantly reducing token usage and improving code review efficiency.

  • Project
    vitali87/code-graph-rag

    Code‑Graph‑RAG parses multi‑language codebases with Tree‑sitter, stores the AST‑derived structure in a Memgraph knowledge graph, and lets you query, edit and optimise the code via natural‑language prompts powered by an LLM. It supports dozens of languages, runtime trace overlay, and can run as an MCP server for tool integration.

  • Project
    Ais1on/CTI-RAG

    A RAG system specialized for Cyber Threat Intelligence that combines vector search and knowledge graphs to enable multi-hop analysis of attack organizations and malware.

  • Project
    HexmosTech/git-lrc

    An AI-powered code review tool that hooks into git commit to catch bugs, security leaks, and technical debt before code enters the repository history.