Stack & Ship Security Check

Free, MIT-licensed CLI and GitHub Action that runs 24 local static checks on Next.js + Supabase + Stripe code. It flags secret keys in NEXT_PUBLIC_ vars or client code, tables without RLS, permissive using (true) or anon write policies, and unsafe Stripe webhook/checkout handling. No account and no network calls, and every finding comes with the fix. Built by Stack & Ship.