v1.2.0 • The Gold Standard

Ship with
absolute confidence.

The elite production-readiness inspector for modern web applications. Detect secrets, env leaks, and security flaws instantly.

ship18ion — bash — champ18ion

Built for the Elite.

`ship18ion` isn't just a scanner. It's your final line of defense against the mistakes that kill production.

Security Intelligence

Deep scan for hardcoded AWS, Stripe, and Google keys. High-entropy detection flags potential leaks before they're pushed.

Instant Context

Zero-config auto-detection for Next.js, Vite, and more. Tailored checks for your specific framework, out of the box.

Build Hygiene

Ensures source maps and root environment files never leak into your deployment artifacts. Keep your builds clean.

Deep Inspection

Everything you need to ensure your app is ready for the world.

Env Variable Audit

Detects unused variables in .env and references to variables that don't exist.

Secret Scanning

Advanced heuristics find API keys and private keys hidden in your source code.

Git Status Check

Warns if you're trying to ship from a dirty working directory or the wrong branch.

Dependency Health

Flags devDependencies in production lists and prevents package duplication.

Hygiene Checks

Locates forgotten console.log() calls and unresolved FIXME/TODO comments.

CORS & Config

Identifies dangerous wildcard CORS origins and hardcoded database strings.

Built for Pipelines.

Integrate `ship18ion` into your CI/CD flow to block insecure builds automatically.

CI Mode

Use the `--ci` flag for clean, machine-readable output and standard exit codes. Perfect for GitHub Actions, GitLab CI, or Jenkins.

$ ship18ion check --ci

Works with the best.

Universal support for the most popular modern frameworks.

Next.jsViteNestJSExpressFastifyRemix

Ready to ship better?

Join the developers who refuse to ship broken apps.