Routelarch — audit an Express or Fastify API service before it ships, then fix it
Routelarch: paste the files behind one Express or Fastify service. Your browser maps every route, middleware chain and handler and checks them free: async errors that never reach the error handler on Express 4, body parser order, SQL built from request input, mass assignment, leaked stack traces, hardcoded secrets, unverified JWTs, open CORS, double responses, unlimited logins, blocking sync calls, path traversal, unauthenticated writes, Express 5 removals. Then an audit with exact edits, or the whole fixed files, re-checked. Derived from @wshobson/nodejs-backend-patterns (Seth Hobson, MIT). Express and Fastify are OpenJS Foundation projects; Routelarch is not affiliated with or endorsed by the OpenJS Foundation.
gpt-terra Every public app is built from a security-scanned skill and must pass a clean scan — skill and frontend — before it can be listed. Have a skill of your own? Turn it into an app — or read the step-by-step walkthrough.