> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nometria.com/llms.txt
> Use this file to discover all available pages before exploring further.

# App Auditor

> Detect tech stack and surface production-readiness issues from any live URL or GitHub repo.

`app-auditor` detects your tech stack and surfaces production-readiness issues from any live URL or GitHub repo. One command, zero config.

<CardGroup cols={2}>
  <Card title="GitHub" icon="github" href="https://github.com/nometria/app-auditor">
    nometria/app-auditor
  </Card>

  <Card title="PyPI" icon="python" href="https://pypi.org/project/app-auditor/">
    app-auditor on PyPI
  </Card>
</CardGroup>

## Install

```bash theme={null}
pip install app-auditor
```

## Usage

```bash theme={null}
# Audit a live URL
app-audit url https://yourapp.com

# Audit a GitHub repo
app-audit repo myorg/myrepo

# JSON output (for CI/CD integration)
app-audit url https://yourapp.com --format json

# Audit with verbose output
app-audit url https://yourapp.com --verbose
```

## What it checks

### URL audit

| Category            | What it checks                                            |
| ------------------- | --------------------------------------------------------- |
| **Stack detection** | Framework, runtime, CDN, database hints from HTML/headers |
| **SEO**             | Meta tags, OG tags, structured data, sitemap, robots.txt  |
| **Security**        | HTTPS, security headers, exposed keys in HTML             |
| **Performance**     | Missing image optimization, large JS bundles              |
| **Crawlability**    | Noindex tags, bot rendering issues                        |
| **Infrastructure**  | SSL validity, HSTS, www redirect                          |

### Repo audit

| Category            | What it checks                                        |
| ------------------- | ----------------------------------------------------- |
| **Stack**           | package.json, requirements.txt, Dockerfile, CI config |
| **Missing files**   | .env.example, README, .gitignore                      |
| **Production gaps** | No Dockerfile, no health endpoint, no error handling  |
| **Security**        | Hardcoded secrets, missing .gitignore entries         |

## Example output

```
Auditing https://myapp.com...

Stack detected: React + Vite / Node.js / Supabase

✓ HTTPS enabled
✓ SSL certificate valid (expires in 287 days)
⚠ Missing og:image (affects social sharing)
✗ robots.txt not found
✗ No sitemap.xml
✗ Images served from external CDN (4 images)
⚠ Large JS bundle: main.js is 1.2 MB (target: < 500 KB)

Score: 61/100 — 3 critical issues, 2 warnings
```

## Integrate into CI/CD

```bash theme={null}
# Exit with non-zero code if score is below threshold
app-audit url https://staging.myapp.com --min-score 70
```

<Note>The same audit engine powers Nometria's free [web-based audit tools](https://nometria.com/tools). The CLI lets you automate audits in your deploy pipeline.</Note>