Production-readiness scan · 2026-08-27
sindresorhus/is-plain-obj
Not scored
Not scored. The AI assessment did not complete; the deterministic findings still apply.
PARTIAL Dependencies were read from manifests only; transitive packages were not checked.
Fix first
medium
No lockfile committed
Dependency versions are declared as ranges, so two installs can resolve to different code and transitive dependencies could not be checked at all. Commit the lockfile your package manager produces.
AI assessment unavailable
The AI scoring step did not complete for this scan. Deterministic findings in the sections above are still real and verified.
Report sections
Open a section for the evidence that drove the score. If you open one first, start with Code.
01Security
Secrets and committed configuration checks
02Dependencies
Dependency and CVE coverage from lockfiles
03Code
0 measured code-quality finding(s)
04Deploy
0 deploy-readiness finding(s)
05Tests & CI
Test and CI signals that prove the code before merge
06Infrastructure
Run the Railway audit to measure what is live
What this scan inspected
- every file scanned for secrets — 15 in total, none skipped
- 3 dependencies from manifests only — no lockfile, transitive deps unchecked
- the AI scored from manifests and the file tree; it did not read source itself
Every section above links to the evidence behind it. Nothing on this page is asserted without a source.