Danger JS review
A free, open-source way to enforce custom pull request policies in CI.
Reviewed by iTechGuides Editors · Editorial team · Updated Oct 2026
Danger JS is an open-source tool for automating team-defined pull request checks in continuous integration. Teams write project-specific rules in a JavaScript or TypeScript Dangerfile, then use those rules to inspect changed files and pull request metadata. It fits engineering groups that want consistent conventions around changelogs, lockfiles, labels, links, assignments, testing, or pull request size. Rules can produce comments, warnings, failures, or formatted Markdown feedback directly on pull requests.
The published setup options emphasize portability across existing development infrastructure. Danger JS can run as an npm module or through a GitHub Action, and it supports GitHub, Bitbucket Server, Bitbucket Cloud, and GitLab CI alongside CI services such as Travis CI, Semaphore, CircleCI, Jenkins, Bamboo, Bitrise, Codeship, Drone, Buildkite, and TeamCity. Linux, macOS, and Windows are supported. Teams can also run rules locally against pull request metadata while developing them, which helps refine policy logic before incorporating it into CI. The open-source, free model avoids a paid tier structure, while deployment remains in the team's own CI environment.
Its scope is deliberate: Danger JS automates policy checks rather than performing AI code review, fixing code, triaging CI failures, or analyzing defects in depth. The main implementation work is translating local conventions into maintainable JavaScript or TypeScript rules and operating those checks in self-hosted CI. Documentation and community channels provide support. Choose Danger JS when programmable review rules and broad CI or Git-host compatibility are the priority. Teams seeking managed deployment, AI-based review, automated fixes, or deeper defect analysis should consider a tool designed around those functions instead.
Danger JS pros and cons
- Where it wins
- Programmable JavaScript or TypeScript rules per project
- Pull request comments, warnings, failures, and Markdown feedback
- Works with major Git hosts and CI systems, including GitHub Actions
- Where it doesn't
- Requires teams to define and maintain their own rules
- No AI code review or automated fixes
- Self-hosted CI deployment with docs and community support
Danger JS fact sheet, pricing and score →
Advertiser disclosure: iTechGuides is reader-supported. Vendors can pay for top positions in our rankings and for a place on other products' pages, and we may earn a commission when you click some links. Bought places stand at the number bought; this page and our disclosure say so. Paying vendors may get a fuller, more detailed review from our editors, and that review can change their score. How we rank.
Last updated · How we research and update