Free local code scan

Find out what's wrong with your code before you ship it.

A launch-readiness scan that runs locally. No signup. No code uploaded anywhere. Every finding and fix prompt is free.

$ npx should-i-ship@latest scan

Node.js 20+ · macOS, Linux, and Windows

100%free

0accounts needed

Localsource analysis

2 filesMarkdown + JSON

What it checks

The mistakes that turn into launch-day problems.

Focused checks for the issues that matter before real users and real traffic arrive.

SECURITY

Security gaps

Find risky patterns and weak defaults before they reach production.

SECRETS

Exposed secrets

Catch credentials and tokens that should never live in source code.

AUTH

Missing auth boundaries

Flag routes and actions that accept requests without authorization checks.

WEBHOOKS

Unverified webhooks

Spot webhook handlers that trust payloads without verifying signatures.

RATE LIMITS

Missing rate limits

Identify public endpoints that can be abused or run up your bill.

COST

Cost traps

Surface unbounded AI calls, expensive loops, and scaling surprises.

Useful output

See the risk. Know what to fix.

The terminal gives you the priority list. The generated report gives you the detail.

● ● ●Terminal

Should I Ship
==============

Score: 68/100
Launch verdict: Fix before traffic
Findings: 6 total (1 critical, 2 high)

Fix-first plan
1. CRITICAL SECURITY: Exposed API key
   Launch impact: Blocker
   Fix: Move the key to an environment variable.

2. HIGH SECURITY: API route missing auth
   Launch impact: Fix before traffic

report.mdGenerated locally

Should I Ship Local Report

Score: 68/100

Launch verdict: Fix before traffic

CRITICAL SECURITY: Exposed API key

A credential appears to be hardcoded in source code.

Location: src/lib/client.ts:12

Suggested fix: Move the key to an environment variable and rotate it.

Private by default

Your code stays on your machine.

01 Scans git-visible files, including uncommitted work.

02 Respects ignored files such as .env.

03 Writes the complete report to .should-i-ship/.

04 Uploads neither source code nor findings.

Zero to Build

Scan found problems?

Zero to Build fixes these issues and builds custom apps.

Work with Zero to Build →