prodlint runs 52 static analysis checks on your codebase, specifically designed for code generated by AI tools like Cursor, Claude Code, Bolt, and v0. It catches the stuff AI gets wrong: hardcoded secret fallbacks, missing auth on server actions, no rate limiting on API routes, empty catch blocks, Supabase tables without RLS, and more. Run npx prodlint in your terminal or use the free web scanner at prodlint.com. Open source, zero config, results in 10 seconds.
No reviews yetBe the first to leave a review for prodlint
Maker
📌
Hey PH! I built prodlint because I kept seeing the same bugs in every AI-generated codebase I worked on. Hardcoded API keys with fallback values, server actions with no auth checks, API routes with zero rate limiting. AI tools are great at writing code that works in dev but they consistently miss production security basics. So I wrote 52 checks that catch exactly these patterns. You can run it right now with npx prodlint or try the web scanner at prodlint.com/score. Its free, open source, and takes about 10 seconds. Would love to hear what you think and what checks you want to see added.