Observed arrival · 2026-11-01
Cloak audits what your JavaScript ships
An open-source command-line tool checks a build for exposed source maps, secrets, debug builds and endpoints, then suggests what to move or harden.
○Open
⊠Login
$Paid
†Ads
✦Pretty
●Pro
◎Niche
◉Human
⚑Risk
ƒJS
- For
- JavaScript developers checking production builds
- Worth noticing
- Its module ratings pair a 1–5 exposure assessment with a specific move-server-side, harden, or leave recommendation.
Field notes
The page lays out a workflow from build scan to module-by-module triage, with sample findings for pricing code, an API module and configuration. Its example fixes include hiding production source maps and moving a model call behind a server endpoint. The site says the audit runs offline; optional classification is separate and uses the user's Anthropic key after asking permission.
Observed signals
Read the marks
Editorial observations of this landing page, not a rating.
○OpenPublic substance visible
✦PrettyNotable craft visible
●ProPolished or operationally mature
◎NicheUnusually specific use
ƒJavaScriptBrowser-side code central
One card from the complete issue