
Codemod
AI-powered open-source platform for automating code migrations and large-scale refactors.
About
Codemod is an AI-powered, community-led platform for automating code migrations, framework upgrades, and large-scale code changes. Its open-source CLI and workflow engine let developers scaffold, test, and run codemods locally or in CI, with first-class ast-grep support for fast, reliable, polyglot AST transformations. The hosted Registry lets teams publish and discover community codemods (e.g., Jest-to-Vitest, ESLint v8-to-v9), and Workflows orchestrate multi-step migrations with YAML config, matrix strategies, and manual approval gates.
It combines deterministic compiler-aware transformations with AI-powered steps, and ships Codemod MCP so AI coding assistants get AST inspection and codemod tooling natively. It is an OpenJS Foundation partner, with tooling adopted by React, Node.js, Express, React Router, Nuxt.js, pnpm, Webpack, and others. Enterprise features include Codemod Insights dashboards, Campaigns across repos, and SOC 2 Type II compliance. Caveat: AI-assisted steps still need dry-runs and review — the platform's own guidance is to prefer deterministic codemods before open-ended AI rewrites.
What it can do
- Codemod CLI for running, testing, and publishing codemods locally or in CI
- JSSG (JS ast-grep) for TypeScript AST transformations with pattern matching
- Workflow engine for multi-step migrations with approval gates
- Codemod MCP server giving AI assistants AST and codemod tooling
- Registry of community codemods for common framework upgrades
Setup
npx codemod or install the Codemod CLI; VS Code extension available. Publish/share via npx codemod publish.
Prerequisites
Node.js for the CLI; a Git repository to run migrations against.
Use cases
Works with
Trust score — 8/10
Scored 8/10 (verified tier, metrics-v1). Evidence: Verified via vendor site/docs/GitHub and reputable coverage, wave 71; Trending score 78/100 from researcher assessment.
Sources
Every fact above was checked against these sources. Where a claim comes from the provider and couldn't be independently verified, the text says so.