Paste a repo. Get a real report.

Manifest reads a public GitHub repository and returns a live dependency and integration map in under a minute. No login, no install, nothing to connect.

No repo handy?

github.com/acme/portal

Ownership & Access Risk

.env committed to git history3 commits back · never rotatedRisk
Stripe secret keyHardcoded in a source fileRisk
Postgres (Neon)Primary datastoreClean

What happens when you paste a URL.

Manifest clones the repository once, over HTTPS, and parses every dependency manifest and lockfile it finds. Nothing is written back to your repository, and nothing is kept beyond the report itself.

Prefer a person to do this instead?

Stack Audit

A human-reviewed, client-ready report for a handoff happening now. No subscription required.

  • Full dependency & integration inventory
  • Ownership & access risk review
  • Client-ready handoff checklist
  • Delivered in 2–3 business days
Book a Stack Audit →