Quick health check on an npm package before installing: latest version, days since publish, deprecation flag, license, stale/deprecated heuristic. One registry request.
Analyze pasted CORS response headers for dangerous combos: reflected origin with credentials, wildcard with credentials, null origin accepted, broad exposed headers. Offline, no probing.
Audits the scripts section of an npm package.json for safety and clarity: risky install hooks, curl-pipe-to-shell, rm -rf, sudo, inline secrets, unpinned npx, non-portable shell syntax, placeholder test scripts, missing standard scripts, and confusing names. Use when reviewing a repo, a dependency, or a PR that changes package.json scripts. Includes a stdlib Python auditor with severity levels.
Quick health check on a public GitHub repo before depending on it: stars, days since last push, license, archived flag, health heuristic. Single unauthenticated API call.
Offline on-page SEO audit of a local HTML file: title, meta description, canonical, robots meta, viewport, Open Graph, h1, image alt coverage, lang/charset. Zero network.
