Know exactly what every project depends on.

Manifest scans any GitHub repo and shows you exactly what it's connected to — every dependency, every third-party service, every credential still sitting in the code. Nothing else to connect.

github.com/acme/portal

Ownership & Access Risk

.env committed to git history3 commits back · never rotatedRisk
Stripe secret keyHardcoded in a source fileRisk
Postgres (Neon)Primary datastoreClean

Every project outlives your memory of it.

A key only one contractor ever knew about. A work credential you copy-pasted into a weekend project and forgot was still there. A subscription still billing a card nobody remembers. The engagement ended months ago, or the repo's been sitting public since last spring — the loose ends don't know the difference.

From repo to handoff, in one pass.

Connect a repository

Read-only GitHub access. No other accounts to connect and no keys to hand over — yours or a client's.

Get the map

Every dependency and third-party integration, found directly in the code and configuration.

Get your checklist

A checklist that stays current automatically — share it with a client, or just keep it for yourself.

manifest.izater.com/acme-portal · scanned 2 minutes ago
framer-motionStack Inventory · still pinned to a pre-release buildVerify
QuickBooks OnlineIntegration Map · syncs accounting dataClean
.env committed to git historyOwnership & Access Risk · 3 commits backRisk
Rotate the committed .envHandoff Checklist · 1 of 7 items
aws-sdkUnused / Cost Review · not used anywhere in the codeVerify

Self-serve, or done for you.

One-time engagement

Stack Audit

A human-reviewed, client-ready report for a handoff happening now. No subscription required.

  • Full dependency & integration inventory
  • Ownership & access risk review
  • Client-ready handoff checklist
  • Delivered in 2–3 business days
Book an audit →

Stop guessing what you shipped.

Run a free scan →