appwalk walks you through your own code — how it starts, what each folder does, what's risky, and the words to say it back to an AI. It taught its founder that `.js` means JavaScript. It'll do the same for you.
Nothing on this page is mocked up. These are screenshots of appwalk running against a real project.
┌─ Guided tour · step 1 of 7 ────────────────────────────────────────────────┐ │ ▶ What this app is │ │ │ │ I can see 5 files. It looks like a Node.js app. │ │ │ │ That just means: it's an app written in JavaScript, and "Node" is │ │ the program that runs JavaScript outside a web browser. │ │ │ │ The `.js` in file names stands for JavaScript — not JSON. JSON is │ │ something different, and we'll meet it next. │ │ │ │ Any word you don't know — press g and I'll explain it. │ └────────────────────────────────────────────────────────────────────────────┘ tour ← back · Enter next · o = open · g = glossary · h = home
It starts with your app and teaches the words as it goes — the `.js` = JavaScript lesson happens in your own project.
┌─ demo-app ─────────────────────────────────────────────────────────────────┐ │ ▾ api/ (1 item) │ │ routes.js js · 161 B │ │ db.js js · 45 B │ │ ▾ handlers/ (1 item) │ │ ping.js js · 47 B │ │ ● index.js js · 202 B │ │ ● package.json json · 136 B │ │ │ │ ▸ .env — location only │ │ why: holds secrets (API keys, passwords). │ │ Keep it gitignored — commit it and anyone can read them. │ │ │ │ ● = entry point (where the app starts) · plain = a regular file │ │ │ └────────────────────────────────────────────────────────────────────────────┘ tree ↑↓ move · ←/→ collapse · Enter open · a audit · q quit
Green marks where your app starts. Nothing hidden, nothing jargon.
audit: 3 of 5 clean (2 findings)
.env .env file is present in the project tree
— fix: .env holds secrets (API keys, passwords) — if it was ever committed, treat those as leaked. Rotate each key at the service that issued it, put the new ones in .env, add .env to .gitignore, run `git rm --cached .env` so it stops being tracked, then purge history (git filter-repo) so old commits stop exposing it. Gitignoring alone does NOTHING for a .env already committed.
package.json no lockfile — installs are not reproducible
— fix: Run your package manager's lockfile generator (e.g. `npm install`) to pin exact versions.A safety scan of the code you didn't write — every finding comes with a fix.
┌─ How it fits together ─────────────────────────────────────────────────────┐ │ ● start → index.js — starts the app │ │ ├─→ api/routes.js — wires requests to handlers (+1 more) │ │ └─→ handlers/ping.js — handles one request │ │ │ │ depth 1 · 3 files mapped │ │ │ └────────────────────────────────────────────────────────────────────────────┘ flow ↑↓ move · Enter open · +/- depth · h home · q back
Entry → routes → data → render. The whole app, as a map you can explore.
┌─ Your setup — settings ────────────────────────────────────────────────────┐ │ │ │ ▶ package.json — the ID card + instruction sheet for a No │ │ .env — where your secrets live — keys and URLs │ │ .gitignore — the list of files git should never track │ │ │ └────────────────────────────────────────────────────────────────────────────┘ config 1 settings · 2 clean up · ↑↓ move · Enter open · q back
What each config file does, how yours is set, and how it could be different. Your `.env` is shown as a location — never its values.
No setup, no signup, no AI key. Run one command and start learning.
`npx appwalk-cli` in your project. That's it — no install dance, no signup.
Locally. Nothing leaves your machine. No upload, no account, no AI key required.
Tour, tree, audit, flow, glossary — every word is one keystroke from a plain-English definition.
You finally understand how it starts, what's risky, and how to tell an AI what you want.
The CLI is free for everyone. Support the build if appwalk helps you understand your code.
The full CLI. Everything on this page.
Buy the build. Keep appwalk free for everyone.
The evolution — coming soon.
Run it in your project. In about a minute you'll know what your code actually does — and the words to say what you want next.
npx appwalk-cliFree forever · open source (AGPL) · nothing leaves your machine