AI CODE REVIEW ยท v21

Thump reads every pull request, hunts the bugs, and suggests fixes in plain English. You just merge.

$ npx thump@latest init
Every PR. Zero bugs.
EST. 2025 โ€” THE REVIEWER
THAT NEVER SLEEPS
SCROLL โ†“
Thump โ€” the rabbit code reviewer
Hunting bugs at
LooplineFernbaseOrbitaStackfernNimblyCoreloopBurrowlyHoptech
// LIVE REVIEW โ€” SCROLL TO HUNT Waitingโ€ฆ๐Ÿž 0/3
checkout.js๐Ÿฐ THUMP REVIEWING
1import { cart } from "./cart";
2
3export function checkout(user, items, coupon) {
4 let price = items.reduce((s, i) => s + i.price, 0);
5 let discount = coupon ? coupon.value : 0;
6 const total = price - discount; // TODO: qty?
7
8 if (user = admin) {
9 return grantAccess(total);
10 }
11
12 if (coupon.custom) {
13 discount = eval(coupon.custom);
14 }
15
16 return charge(user, total);
17}
checkout.js ยท line 6 HIGH

Quantity is ignored โ€” a cart of 3 ร— $20 charges $20. Customers would love this bug.

fix: items.reduce((s,i) => s + i.price * i.qty, 0)
checkout.js ยท line 8 CRITICAL

= assigns, === compares. Every visitor just became an admin.

fix: if (user === admin) {
checkout.js ยท line 13 SECURITY

eval() on user input is a remote code execution hole. Thump refuses to look away.

fix: parseCouponRules(coupon.custom)
โœ“ 0 BUGS LEFT ยท SHIP IT
How it works

Three hops
to ship it

Connect your repo

One click for GitHub or GitLab. Thump reads your whole codebase context โ€” not just the diff โ€” before it says a word.

01

Thump reviews every PR

Logic, security, style and performance โ€” checked in ~47 seconds, commented in plain English your team actually reads.

02

Merge with confidence

Approve, request changes, or let Thump auto-fix the small stuff. Every merge ships with a clean bill of health.

03
Features

Built like a
warren

Inline comments

Reviews where you work

Comments land on the exact line, in your GitHub PR โ€” not in another dashboard nobody opens.

๐Ÿฐ Thump ยท just now
This loop is O(nยฒ) โ€” swap to a Map lookup and it's 40ร— faster.
Auto-fix

One-click fixes

Don't just read the suggestion. Apply it.

total = price - disc
Security scan

Always hunting

Injection, secrets, eval โ€” swept every commit.

Tone control

Your reviewer, your vibe

Try it โ€” flip the tone:

"Tiny catch! This === slipped in as = โ€” easy fix, I've suggested it below. Great PR otherwise! ๐ŸŒฑ"
Integrations

Lives in your stack

GitHubGitLabBitbucketVS CodeJetBrainsSlackCI/CD
No bugs โœณ No drama โœณ No 2am rollbacks โœณ Just ship โœณ
Try it yourself

A review, live

Click the bugs. Apply the fixes. Watch it merge.

Ffeat: coupon checkout#142opened by fernanda ยท 1 file changed
โœ“ Merged โ€” all checks passed ยท 2 bugs fixed by Thump
function applyCoupon(order, code) {
+ const coupon = lookup(code);
๐ŸฐThumpยท just now ยท HIGH

lookup() returns null for unknown codes โ€” the next line crashes checkout for every typo'd coupon.

+ if (!coupon) return order;
+ order.total = order.total - coupon.value;
๐ŸฐThumpยท just now ยท CRITICAL

Stacked discounts can push total negative. With this code, you'd pay customers to shop.

+ order.total = Math.max(0, order.total - coupon.value);
+ log("coupon applied: " + code);
return order;
}

โ†‘ click a highlighted line to read Thump's review

Receipts

Thump by the numbers

0
Bugs thumped
0
Fewer rollbacks
0
Avg review time
0
Dev rating
Voices

Devs on Thump

"Thump caught a race condition our whole team missed for three sprints. I owe it a carrot."

M
Mara J.
Staff Eng, Loopline

"The tone control is genius. Our juniors get kind comments, our seniors get blunt ones. Perfect."

K
Kenji T.
Eng Manager, Orbita

"47 seconds. Our human review SLA was 2 days. I did the math twice."

P
Priya S.
CTO, Fernbase

"It reviewed my side project and roasted my variable names. Five stars."

D
Diego R.
Indie hacker

"We merged 3ร— more PRs the first month. The rabbit simply does not sleep."

A
Ana W.
Platform Lead, Nimbly

โ† drag to scroll โ†’

Pricing

Feed the rabbit

Burrow
$0/mo

For side projects and open source. Forever free.

  • 1 repo
  • 50 reviews / mo
  • Friendly tone only ๐Ÿฅ•
Start free
Warren ยท most popular
$12/mo

For teams shipping every day.

  • Unlimited repos
  • Unlimited reviews
  • Auto-fix & tone control
  • Security scanning
Get Warren
Jackalope
$29/mo

For orgs with serious warrens.

  • Everything in Warren
  • SSO & audit logs
  • Self-hosted option
Talk to us

Ship bug-free.

Free for open source. Set up before your coffee cools down.

$ npx thump@latest init
Get Thump free
โœ“