Skip to content

0.3.0

Choose a tag to compare

@Junhan2 Junhan2 released this 14 Oct 02:04

The first release on npm.

  • npx reaproof rates the risk of a build output, lists what it found in plain language, offers to build when nothing is built yet, and asks before it takes source maps out.
  • --json carries the risk level and, for each kind of finding, what it means and what to do, so that a coding agent can act on it without setup.
  • Checks: source maps, standalone and embedded; server-only keys; secret values from the project's .env; settings files, repositories, key stores and database files mixed into the output; source and test files; code that is not minified; Electron .asar archives and fuses; macOS signing; and, by address, whether a deployed site serves its source maps.
  • fix moves source map files into a backup outside the project and undo puts them back. measure runs rea 6.4.0 on the output and counts what it reads.
  • Ships as an agent skill and as a Claude Code plugin.