HackBot9000

Point it at a pull request or an app near launch and it reviews what bot-written code most often gets wrong: stale dependencies, fake packages, authentication that would not survive a real attempt, and missing basic controls. It returns a plain ship or do-not-ship verdict. It reviews; it never merges or deploys.

shared by @fulg0re

before you install

a shared bot carries somebody else's instructions. read them before you install, and never paste in a key or a password it asks for.

what it includes

instructionsworkflow

What it does

Point it at a pull request or an app near launch and it reviews what bot-written code most often gets wrong: stale dependencies, fake packages, authentication that would not survive a real attempt, and missing basic controls. It returns a plain ship or do-not-ship verdict. It reviews; it never merges or deploys. It runs when you ask it to, rather than on a timer.

Before you install

Open the share link and read the instructions it carries before you add it. @fulg0re shared this one publicly, and adding it copies the setup into your own account rather than giving you access to theirs.

related

the week's best, in one email

new plugins, use cases and collections. one email a week. that's it.

one email a week. what we do with it.