madhudollu · Product Hunt

SupaBoot — SaaS + AI starter kit Choose your stack. Get a production-ready GitHub repo. ⭐

u/Still_Amphibian545 · Reddit

almost launched a side project with my api keys sitting in the repo (a week free gpt 5.6 on us) was about a day from launching a small project when i noticed my openai key was just sitting in a committed file. it had been there for weeks. no idea how i missed it. made me wonder what else was wrong that i couldn't see. turns out for vibecoded stuff it's usually the same handful of things. secrets in the repo, endpoints with no auth, a database with no access rules, no limit on the ex

u/DistinctPicture4660 · Reddit

I built a security scanner that checks every GitHub push and tells AI exactly how to fix the issues Hello, As a developer, I ship a lot of code with Claude Code, and I've used pretty much every security scanner out there. Most of them are great at telling you what's wrong. Then they leave you with a long report, and you're back to copying logs into Claude or Cursor, asking your AI to figure out how to fix everything. I wanted something that fit the way many of us build software today.

@nathanghart · X

Submitting for approval. I built a free tool for anyone about to ship a vibecoded app. It scans your repo for what bites you in prod (leaked keys, no auth, no error handling). I ran it on 1,868 AI-built apps and even caught my own scanner being ~42% wrong.

@g_saikumar_ · X

Real-time GitHub intelligence for developers, founders, and open-source enthusiasts.

othmanosx · HN

I still don't like the fact that AI is adding more stuff for us to read, it's accelerating the code production but slowing down the code review. I built my own code reviewer as well ( https://pyor.review/ ), surfacing the important stuff first is the right track, but adding more stuff to read is daunting, but asking AI to just point you to what you need to focus on and skim the noise is what I'm leaning more towards.

@david_kubgak · X

Generate a professional README from any GitHub repository in seconds.

@w3ziqv · X

built GitScore — analyzes your GitHub activity and gives you a score from 0 to 1000+ based on commits, stars, impact, and global rank still early, would love brutal feedback

@plaqueboywest · X

I’m building Super Dent X. Connect GitHub once, and it remembers your build journey for you. Curious what you think: Would love your feedback !

@Gallagh819 · X

@gabrielcdev · X

github notifications on discord DM

@manoj_surya_ · X

I just launched 🚀 A Proof of Ship, every day — straight from your GitHub. You already do the hard part: you commit. git-to-x turns that into a designed card and posts it to X every morning. Your timeline finally looks like what you actually are — someone who ships. → 8 card designs, rotating (terminal, heatmap, flame, ticker…) so it never gets stale → weekly + monthly milestone cards — your streak becomes a story worth following → tweet from your CLI / Cursor / Claude Code without leaving your editor → free for 10 days, full access See who else is shipping daily under #proofofship — and join them. It touches your repo, so safe-to-try came first: → open source (AGPL) — audit it or self-host → read-only — we never touch your code This is my first build-in-public tool. I built it for myself, and for anyone tired of switching between shipping and posting about shipping. First 100 get founding lifetime — a permanent number on every card. Try it, tell me