# @readystack/view-in-browser-leak-audit

> 24 rules read the .html file you are about to open in the browser and flag every line that behaves differently once the page has a public URL: live API keys, localhost and file:// paths, http:// resou

Latest version **1.0.1** (published 2026-09-23) · SEE LICENSE IN LICENSE.txt license · 0 weekly downloads

## Install

```sh
npm install @readystack/view-in-browser-leak-audit
pnpm add @readystack/view-in-browser-leak-audit
yarn add @readystack/view-in-browser-leak-audit
bun add @readystack/view-in-browser-leak-audit
```

Provides the command `view-in-browser-leak-audit`.

## Health

**Score 55/100 (C)** — status: active.

Positive: no vulnerabilities; recently updated; high maintenance score.

Warnings: low downloads; no types; no esm support.

## Facts

| | |
|---|---|
| Version | 1.0.1 |
| Published | 2026-09-23 |
| First published | 2026-09-20 |
| Weekly downloads | 0 |
| License | SEE LICENSE IN LICENSE.txt |
| TypeScript types | none |
| Module format | CommonJS |
| Node | >=18 |
| Dependencies | 0 |
| Unpacked size | 37.3 KB |
| Known vulnerabilities | 0 |
| Install scripts | no |
| GitHub stars | 0 |
| Maintainers | readystack |
| Keywords | view in browser, html, preview, api key, secret, localhost, publish, static site, audit, leak |

## Links

- npm: https://www.npmjs.com/package/@readystack/view-in-browser-leak-audit
- Repository: https://github.com/jmshinhwa/readystack-themes
- Homepage: https://getreadystack.com
- Issues: https://github.com/jmshinhwa/readystack-themes/issues
- Funding: https://buy.polar.sh/polar_cl_CwvLDIxujtAKjVYNswBmnY71CVpJXNzshSaBQ2RDuKe
- npm.io page: https://npm.io/package/@readystack/view-in-browser-leak-audit

## Alternatives

- [@tsparticles/shape-image](https://npm.io/package/@tsparticles/shape-image.md) — 303.7K weekly downloads
- [@tsparticles/shape-line](https://npm.io/package/@tsparticles/shape-line.md) — 233.7K weekly downloads
- [stringify-attributes](https://npm.io/package/stringify-attributes.md) — 58.6K weekly downloads
- [mobile-drag-drop](https://npm.io/package/mobile-drag-drop.md) — 46.3K weekly downloads
- [@comunica/actor-rdf-parse-html](https://npm.io/package/@comunica/actor-rdf-parse-html.md) — 29.2K weekly downloads

## Recent versions

- 1.0.1 (latest) — 2026-09-23
- 1.0.0 — 2026-09-20

## README

# View in Browser — Publish Leak Audit (HTML)

![View in Browser — Publish Leak Audit (HTML)](https://getreadystack.com/img/promo/sku128294_result_card.jpg)

24 rules read the .html file you are about to open in the browser and flag every line that behaves differently once the page has a public URL: live API keys, localhost and file:// paths, http:// resources, a leftover noindex.

## Install

```
npx @readystack/view-in-browser-leak-audit file
```

Node 18+. The same 24 rules as the VS Code extension, from a terminal or CI.

## Free

- Audit the HTML file you are about to open in the browser: all 24 rules, every finding with its severity, line number and fix. The clean fixture returns 0 findings, the dirty one returns 27. No key, no watermark, no locked answers.
- `--rules` lists every rule

## With a licence ($29 once)

- Scope: one command sweeps every HTML file in the workspace instead of the one in front of you, and writes a dated LEAK-AUDIT.md you keep as evidence — forty pages in one pass instead of forty passes.

```
@readystack/view-in-browser-leak-audit --dir ./templates --report html --out report.html
```

In February 2026 a developer reported an $82,000 Google Cloud bill after a key embedded in client-side Google Maps code was taken from the page source; their normal spend was $180 a month.

## Use from an AI agent (MCP)

Claude Code · Cursor · Windsurf · any MCP client - add to your MCP config:

```json
{ "mcpServers": { "view-in-browser-leak-audit": { "command": "npx", "args": ["-y", "@readystack/view-in-browser-leak-audit", "--mcp"] } } }
```

Tools: `check_text` and `check_file` (free) · `check_dir` (licence). The agent gets every finding with the line number.

## Use in CI

```yaml
- name: View in Browser — Publish Leak Audit (HTML)
  run: npx -y @readystack/view-in-browser-leak-audit --dir . --ci
```

(container: `docker run --rm -v "$PWD:/work" getreadystack/view-in-browser-leak-audit --dir /work --ci`)

The folder sweep, reports and CI mode need one licence — one payment, no subscription. Set `READYSTACK_LICENSE=<key>` or run `--license <key>` once.

[Get a licence](https://buy.polar.sh/polar_cl_CwvLDIxujtAKjVYNswBmnY71CVpJXNzshSaBQ2RDuKe)


<!-- view in browser leak audit -->

---
_Source: https://npm.io/package/@readystack/view-in-browser-leak-audit · Machine-readable twin of the npm.io package page. Health data is recomputed on every publish._