You’re viewing the 2026-08-07 issue, not the current issue. Go to the current issue: 2026-08-14

Featured in Domain Arrivals · 2026-08-07

Does It Leak? — a security roast for weekend-built apps

vibecodedroast.com ↗ · Developer Corner · score 86.0
Open: public page gives enough substance to understand the site $Paid: pricing, booking, ecommerce, subscription, or paid access is visible ADAds: visible ad load or ad-supported content Pretty: notable design, copy, craft, or presentation Pro: polished, finished-feeling, serious, or operationally mature Niche: specific audience, workflow, or unusually focused use case Human: personal, local, community, civic, handmade, or real-person signal !Suspicious: scammy, spammy, trust theater, finance fog, or credibility concern

Does It Leak? scans an app URL with read-only security checks, then returns a graded, shareable report card covering exposed keys, open databases, missing authentication, and related configuration mistakes.

Why it surfaced

This is a security scanner with an unusually good editorial mechanism: every finding gets a severity stamp, plain-English explanation, joke, and copy-paste fix. Its opt-in leaderboard turns remediation into public performance, while the sample report demonstrates the tone with findings such as a Supabase service-role key shipped in a client bundle.

A File Musicians Can Argue With

August 7’s newborn domains include editable orchestral scores with up to 33 staves, 15 years of Valencia council interventions, a dementia-friendly frame with one optional button, and a memorial golf tournament whose winner wears the Meatball Jacket.

This is one of 1,000 discoveries in the 2026-08-07 Domain Arrivals issue.