Sonar tells you what new code is risky. Moult tells you what existing code you can safely remove — dead code, stale flags, duplication — with runtime-backed confidence, right inside your pull requests.
Free for public repositories — no credit card required.
The Moult gem analyses each pull request inside your own CI runner. Your source code never leaves your infrastructure.
Only findings and metrics are sent to Moult Cloud — file paths, line ranges, and confidence. Never file contents.
A Check Run shows new-vs-baseline candidates for removal — confidence-graded, never a claim that code is certainly dead.
What lands on your pull request
Findings are compared against your repository's baseline. Only new findings decorate the PR — existing debt stays out of your way until you choose to work it down.
Commit .github/workflows/moult.yml — no tokens to store, and
your source never leaves your CI:
.github/workflows/moult.yml
name: Moult
on:
push:
branches: [main]
pull_request:
permissions:
contents: read
id-token: write
jobs:
moult:
runs-on: ubuntu-latest
steps:
- uses: moult-rb/moult-rb@v1
Free
Every public repository, fully enforced. Always.
Paid / private repo
Enforce on private repositories, with history, trends, and a team dashboard.
Get started