I kept finding gaps in my repos after open-sourcing — so I built a zero-dep CLI

<p>A few months ago a lawyer asked our team a simple question: <em>"Can you prove<br /> nothing in this product is GPL?"</em> We couldn't — not quickly. A couple thousand<br />

<p>I started this project because vibe coding makes it possible to get an app<br /> working before a beginner has learned how secrets, frontend bundles, or Git<br /> history

<p>You’ve been there.</p> <p>You clone a repo. The README looks solid. There’s a <code>Dockerfile</code>. Maybe a <code>docker-compose.yml</code>. Everything appears set up.</p>

<p>Most developer security content is a checklist you'll never finish.</p> <p>OWASP Top 10. Rotate your secrets. Use HTTPS. Thanks, very helpful.</p> <p><strong>The real gap in