vibeaudit: 11 static checks for security holes in AI-built apps

A developer released vibeaudit, a zero-dependency Node 20+ CLI that scans code, SQL migrations, git history and build output for common flaws in AI-generated apps. Studies cited show 63% of 62 Lovable apps had critical or high vulnerabilities and 18.5% of 400 repos committed a .env file.

• 11 checks cover secrets in .env and git, Supabase RLS, authz, JWT, CORS, headers and deps
• Score starts at 100: critical −25, high −12, medium −4, low −1
• A single critical finding caps the verdict at "Do not ship yet"
• Each finding includes file, line, CWE reference and a ready fix