@readystack/hardcoded-credential-audit

Hardcoded Credential Audit — 8 Stacks

Open any config file and see every hardcoded credential — and every setting that quietly undoes your encryption — with the line number and the reason. 30 checks, 30 safe-config snippets, offline in the editor, no account.

Install

npx @readystack/hardcoded-credential-audit file

Node 18+. The same 30 rules as the VS Code extension, from a terminal or CI.

Free

• Audit the file you have open, or only the lines you selected, all the way to the end with all 30 checks and their line numbers, and insert any of the 30 safe-config snippets at the cursor — no key, no limit, no watermark, nothing uploaded.
• --rules lists every rule

With a licence ($29 once)

• Scale, not depth held back: the same 30 checks across every file in the workspace in one pass, a CSV of the findings written into the repo carrying the line and the reason but never the matched value, an automatic re-check on every save, and a JSON file a CI step can fail the branch on.

@readystack/hardcoded-credential-audit --dir ./templates --report html --out report.html

Dedicated secret-scanning platforms bill $18-$35 per developer per month and native scanning on GitHub or GitLab rides on paid plans at $49-$99 per user per year (2026 pricing round-ups); an incident-response analyst hour starts at $165 in 2026. None of them read the file open in your editor before you commit it.

Use from an AI agent (MCP)

Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:

{ "mcpServers": { "hardcoded-credential-audit": { "command": "npx", "args": ["-y", "@readystack/hardcoded-credential-audit", "--mcp"] } } }

Tools: check_text and check_file (free) · check_dir (licence). The agent gets every finding with the line number.

Use in CI

- name: Hardcoded Credential Audit — 8 Stacks
  run: npx -y @readystack/hardcoded-credential-audit --dir . --ci

(container: docker run --rm -v "$PWD:/work" getreadystack/hardcoded-credential-audit --dir /work --ci)

The folder sweep, reports and CI mode need one licence — one payment, no subscription. Set READYSTACK_LICENSE=<key> or run --license <key> once.

Get a licence