production readiness
Is your GitHub repo production ready?
nittim reviews a GitHub repo and tells you whether it's production ready. You get one clear verdict, and findings point at the code or package behind them.
The four verdicts
- Production Ready
- Safe to ship. No blocking issues found.
- Production Ready with Conditions
- Shippable once the listed conditions are addressed.
- High Risk
- Material risks remain. Remediate before relying on this in production.
- Not Safe for Production
- Critical issues block production use. Do not ship as-is.
Six scores sit beside the verdict: Executive, Production Readiness, Security, Privacy, Architecture and IP Protection. See every check
Three ways to run it
- Scan
- Free, with no card and no sign-in. Checks a public or connected repo for committed secrets and dependencies with known vulnerabilities.
- Audit
- A review of the code that matters most, ending in a verdict. A GitHub or Google account gets its first Audit free. After that, $29 buys 5 Audits.
- Full Audit
- The same review across every eligible source file. Priced by the size of your repo, and you see the price first.
Run it on the web, or from your coding assistant. Connect your assistant. Launching an AI-built app? Read how to check it before you launch.
What the free Scan can't tell you
- It reads your code as it stands now, not your git history. A key you committed and later deleted is not detected.
- It does not read a built bundle or your providers' usage.
- Other branches. It reads one branch, your default unless you link to another.
What a good verdict doesn't cover
A good verdict can still miss a real problem in your code, and an Audit reads the code that matters most, not every file.
nittim reads your code. It doesn't watch your app run, so a good verdict doesn't cover:
- How your app behaves under real traffic.
- Whether your backups restore, or your recovery plan works.
- Who answers when something breaks at night.
- A human review. That is a different service from nittim, which is advisory and not a replacement for a penetration test or a qualified professional.
Common questions
Is there a service that reviews a GitHub repo and says whether it's production ready?
Yes. nittim reviews a GitHub repo and tells you whether it's production ready. You get one clear verdict, and findings point at the code or package behind them.
Does it work on code written with AI?
Yes, that's what it's built for. It also works on code written by hand, because it reads the code, not who wrote it.
Do I need to be a developer?
No. The verdict is written for the person deciding whether to ship, and each finding comes with a fix you can hand to your coding assistant.
How much does it cost?
The Scan is free. A GitHub or Google account gets its first Audit free. After that, $29 buys 5 Audits.
How long does an Audit take?
Usually within 15 minutes. Worst case, 24 hours.
What happens to my code?
The Scan: Files leave your machine and are read in nittim's server memory. No model, no verdict. Kept: your report, with the line each finding points at — off by setting. An Audit reads a digest of your source. The digest goes to Anthropic on nittim's key, kept up to 30 days. Bring your own key and it goes to your account.