Tools — in progress

Supported does not
mean replaced.

xops supports tools by detecting them, reporting them, routing commands to them, and sometimes creating approved setup plans. Each tool remains the owner of its own domain.

Package managers
npmpnpmyarn

xops does

  • detect lockfiles and packageManager field
  • route scripts through the detected package manager
  • use npm for npm-registry operations where appropriate
  • report conflicts between lockfiles

xops does not

  • replace package resolution
  • silently install another package manager
Source control and repo hosting
gitGitHub remotesGitLab remotesBitbucket remotes

xops does

  • detect status, branch, remotes, ahead/behind
  • commit/push only when requested
  • show remote divergence and recovery plans

xops does not

  • rewrite history silently
  • force push silently
  • create remotes silently
Monorepo / workspace
npm workspacespnpm workspacesyarn workspacesTurborepoNxRush

xops does

  • detect workspace layout
  • build package graph
  • compute affected packages
  • run package operations in dependency order
  • respect existing monorepo runners

xops does not

  • replace Turbo/Nx/Rush
  • force a monorepo structure
Testing
VitestJestPlaywrightCypressSupertest

xops does

  • detect configs, dependencies, scripts
  • prefer existing package scripts
  • run unit/integration/API/e2e/affected tests
  • recommend missing test setup only when evidence supports it

xops does not

  • invent test commands when scripts/configs are ambiguous
  • recommend Playwright for backend-only packages
  • recommend Supertest for frontend-only packages
Quality
TypeScriptESLintPrettierBiomeHuskylint-staged

xops does

  • detect quality tools
  • run lint/format/typecheck/precommit flows
  • prefer existing scripts
  • recommend missing scripts/config only when useful

xops does not

  • add competing linters by default
  • rewrite configs silently
Release
xops release stacksChangesetssemantic-releaserelease-please

xops does

  • detect release ownership
  • integrate release status
  • detect conflicts
  • run xops-managed release stacks when configured

xops does not

  • duplicate version bumps
  • guess between release owners
Dependency monitoring
RenovateDependabot

xops does

  • detect config
  • report schedules/groups/ecosystems
  • evaluate dependency update PR risk
  • recommend one provider only when both are missing

xops does not

  • install or configure bots silently
  • recommend a second bot when one is already active
Security
xops built-in checksnpm auditSnykTrivyGitHub Advanced Security / CodeQLlicense scanningSBOM

xops does

  • run built-in tarball and publish safety checks
  • detect scanners
  • normalize security findings
  • include required scanners in release gates when configured

xops does not

  • require paid/external scanners by default
  • claim GitHub-side security settings are enabled unless verifiable
Secrets and config
.env.env.example.npmrcDopplerVaultAWS Secrets Manager1Passwordutilitix secret aliasesCI secrets

xops does

  • detect providers
  • validate required env names
  • redact secret values
  • check that sensitive files are not published

xops does not

  • print secrets
  • store raw secrets
  • copy secrets between providers
  • unlock vaults during status
CI
GitHub ActionsGitLab CICircleCIJenkins

xops does

  • detect CI files
  • report xops usage in CI
  • recommend xops validation/dependency/API jobs when relevant
  • create workflows only after approval

xops does not

  • create CI workflows silently
  • claim remote CI settings are configured from local files alone
API operations
PostmanNewmanOpenAPI / SwaggerSwagger UIRedocBrunoInsomnia

xops does

  • detect API collections/specs
  • detect Newman runner
  • run existing API test scripts
  • recommend Newman when Postman collections exist but no runner exists
  • validate OpenAPI when supported
  • report Bruno/Insomnia collections

xops does not

  • require Postman SaaS for local collection workflows
  • create SaaS accounts
  • recommend unsupported runners
Documentation
DocusaurusStorybookTypeDoc

xops does

  • detect docs tools
  • run existing docs build scripts
  • recommend docs CI only when docs tooling exists

xops does not

  • recommend documentation frameworks generically
Containerization
DockerDocker Compose

xops does

  • detect Dockerfile and compose files
  • report container build scripts
  • recommend .dockerignore when Dockerfile exists and .dockerignore is missing
  • connect Docker presence to security scan recommendations

xops does not

  • recommend Docker for every app
Deployment
VercelNetlifyRenderRailwayFly.ioAWSGCPAzureKubernetesHelm

xops does

  • detect deployment config files and env var names
  • report deploy status
  • validate required env names when configured

xops does not

  • create cloud accounts
  • deploy silently
  • recommend cloud providers generically
Observability
SentryOpenTelemetryDatadogPrometheusGrafana

xops does

  • detect SDKs/config/env names
  • report observability status
  • recommend release/env validation when evidence exists

xops does not

  • recommend observability vendors generically
Metadata and Mongo operations
MaGitutilitixMongo usage classifier

xops does

  • classify Mongo usage
  • recommend MaGit only for Mongo-backed metadata/config/deploy state
  • recommend utilitix only for Mongo backup/restore/replication/compare workflows
  • route MaGit operations to MaGit
  • route Mongo utility operations to utilitix

xops does not

  • use utilitix as a MaGit replacement
  • recommend MaGit for generic runtime Mongo usage
  • recommend utilitix just because Mongo exists