Production-readiness scan · 2026-05-10
semgrep/semgrep
52/100
Workable, with significant gaps to close.
Infrastructure
A repository cannot answer what is actually running: how many replicas, whether anything healthchecks them, what restarts on a crash, or whether a credential in git is also live in your environment. Connect the Railway project and those become measured rather than inferred.
What happens to the token
Only variable names were read, never their values, and the API token was not stored. It is used for this one request and never written to disk or database. Only variable names are read — never their values.