Dependency Risk
Lockfile and manifest review for risky package posture, loose ranges, missing audit habits, and quick hardening wins.
INR 499 | Pay after preview | Passive review only
Repo Security Mini-Audit
A safe review for one GitHub repo or app folder: dependencies, secret patterns, GitHub Actions permissions, SECURITY.md, Dependabot, and five prioritized fixes.
INR 499One repo or app folder
Preview firstPay only after scope is useful
No hackingNo login tests or probing
Fast outputChecklist plus fixes
What You Get
Secret Exposure Patterns
Passive scan for common secret-like patterns without printing private values in the final report.
GitHub Hygiene
Actions permission posture, missing Dependabot setup, absent SECURITY.md path, and repo handoff risks.
How It Works
Send Repo
Reply in the same WhatsApp, DM, or thread where you got this link. Share only a public repo or safe folder you own or have permission to review.
Get Preview
I check whether the repo fits this passive mini-audit and send a small useful preview before asking for payment.
Pay UPI
If the preview is useful, pay INR 499 to the UPI ID on this page. No OTP, UPI PIN, password, or private secret should be shared.
Receive Report
You get the final checklist with prioritized fixes after the payment is received.
Sample Findings
Medium: No visible Dependabot configuration
Dependency and GitHub Actions updates are easier to miss without a regular update path.
Medium: Loose dependency ranges
Ranges such as latest can pull unexpected major versions during fresh installs.
Low: No visible SECURITY.md reporting path
A private reporting route helps responsible disclosure.
Boundary
- Only repos you own or have permission to share.
- No login testing, exploit attempts, scraping private data, production probing, malware, or bypass help.
- No passwords, OTPs, UPI PINs, private keys, or real secrets should be shared.
- This is a practical checklist, not a penetration test or certification.
Pay After Preview
INR 499
sajidofaspire@oksbi
Payment is requested after I confirm the repo is safe to review and send a useful preview. Final checklist/report is delivered after successful payment is received.
Start With This Message
Copy this and reply in the WhatsApp, DM, or thread where you received this link.