prashantdivate/yocto-lens

Yocto Lens is a command-line tool that checks Yocto and OpenEmbedded layers for problems before they cause build failures or security issues. Yocto is the build system most commonly used to create custom Linux distributions for embedded hardware (routers, industrial devices, automotive systems, and similar). The layers it analyzes are the structured folder hierarchies that contain the recipes, patches, and configuration files describing what software to build and how. The tool scans three types of files: BitBake recipe files (.bb and .bbappend), patch files (.patch), and layer configuration files. For each, it runs different kinds of checks and reports findings through an interactive terminal interface with tabs for static analysis, style, and recipe health. You can also run it without the UI for use in automated build pipelines. The static analysis checks look for things that can cause real problems: a recipe that pins its source to a floating revision (which can silently change between builds), insecure HTTP URLs in source downloads, hardcoded credentials or API tokens left in metadata, absolute paths that would only work on the developer's machine, missing or broken layer compatibility declarations, and licenses that need attention such as GPLv3 inclusions or absent license checksums. The style checks enforce OpenEmbedded conventions: recipes should have SUMMARY and DESCRIPTION fields, variable assignments should follow a standard ordering, line lengths should stay within limits, and old-style override syntax (like _append and _prepend) should be updated to the newer colon-based form. Patch files are checked for required Upstream-Status and Signed-off-by headers. A single binary download covers Linux, macOS, and Windows. Pointing it at a layer folder is enough to start, no Docker, no environment variables, and no connection to a running Yocto build are required. Results can be exported as JSON or SARIF for integration with code-review and CI tooling.