by braedonsaunders
Paste any GitHub URL and get an interactive architecture map — how files connect, what breaks if you touch something. Runs entirely in the browser.
HTML 80.4% · JavaScript 19.6%
Is it a true single-file web app?
✗ No, this is not a single-file web app. It needs 15 files from elsewhere.
– Contacts
cdn.jsdelivr.net– Contacts
cdnjs.cloudflare.com– Contacts
fonts.googleapis.com– Contacts
fonts.gstatic.com– Contacts
unpkg.comHow to fix it
→ Inline
react.production.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
react-dom.production.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
babel.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
d3.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
d3-sankey.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
acorn.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
jsrsasign-all-min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
jszip.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.comShow full list (15)
→ Inline
tree-sitter.js into a <script>/<style> tag instead of fetching it from cdn.jsdelivr.net→ Inline
jspdf.umd.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
mermaid.min.js into a <script>/<style> tag instead of fetching it from cdnjs.cloudflare.com→ Inline
3d-force-graph into a <script>/<style> tag instead of fetching it from unpkg.com→ Inline
3d-force-graph.min.js into a <script>/<style> tag instead of fetching it from unpkg.com→ Self-host the webfont as a base64
@font-face, or fall back to a system font stack (currently fonts.googleapis.com)→ Self-host the webfont as a base64
@font-face, or fall back to a system font stack (currently fonts.gstatic.com)Security audit — full results 8/9
✓ No leaked credentials (detect-secrets)
✓ Semgrep security-audit ruleset
✓ Semgrep javascript ruleset
✗ eval() usage — eval() call found — needs manual review
✓ Function() construction
✓ decode→eval chain
✓ document.write of decoded content
✓ sendBeacon usage
✓ decoded content DOM injection
Embed this badge
