Code Defenders

Your codebase is pristine. Your engineers are sharp. Your CI/CD pipeline is a work of art.

Then the PRs start coming in.

Code Defenders is a tower defense game for developers. Deploy reviewers, block bad commits, and protect your repo from an endless wave of junior devs, AI agents, 10x rockstars, and worse — before they merge to main.

How it works

Bad PRs walk the path toward your REPO. Place reviewers on the grid to intercept them. If a PR reaches production, your codebase takes damage. Survive all 15 sprints to win.

Grow from Startup to IPO

The game evolves across three stages — each one unlocking new reviewers, new threats, and a bigger map with more attack lanes.

• Startup (sprints 1–5): Small team, small map. Junior devs and AI agents. Survive on a shoestring budget.
• Series A (sprints 6–9): The team is growing. Rockstars, managers, and consultants join the fray. New map, new reviewers unlocked.
• Public (sprints 10–15): You're at scale now. Vendors, hacked bots, and a second attack lane open up. Good luck.

Reviewers

• Linter — fast, cheap, slows enemies down
• Unit Tests — hits every PR in range simultaneously
• QA Engineer — deals 2x damage to already-flagged PRs
• Senior Engineer — high damage, long range, handles anything
• Security Audit — the only reviewer that can see cloaked threats
• CI/CD Pipeline — area blast, decimates clusters
• Documentation — boosts adjacent reviewers by 40%
• Sales — no combat value, generates passive budget every sprint
• Lawyer, Architect, Training — passive insurance against the three boss types

Threats

• Junior Dev — slow, numerous, commits console.log everywhere
• AI Agent — fast, confident, usually hallucinating
• 10x Rockstar — fragile but moves fast and breaks things
• Manager — massive PR, slow, does serious damage if it lands
• Consultant — high HP, sometimes walks backwards, always expensive
• Vendor — immune to Linter and Unit Tests
• Hacked Bot — cloaked and invisible until a Security Audit reveals it
• Boss: Lawsuit — nearly invincible. Only a Lawyer can dismiss it.
• Boss: DDoS — spawns mini-bots as it walks. Build an Architect to stop the spawns.
• Boss: Ransomware — disables your reviewers as it passes. Training prevents the shutdown.

Built with

Vanilla HTML, CSS, and Canvas. No frameworks. No dependencies. Just vibes and a healthy fear of Friday deploys.

If a PR reaches your repo, that's on you.

☕ Enjoyed the game? Buy me a coffee — it keeps the codebase pristine.