Stripe Checkout
for Payments · stripe.comWires a real checkout flow with webhook handling so you can actually charge someone.
● medium risk
Fixes
Real tools for the gaps across your apps. Deterministic skills open reviewable draft PRs when they are supported.
PostHog
for Analytics · posthog.comDrops in event tracking so you can see what users actually do in your app.
● low risk
Sentry
for Error tracking · sentry.ioCatches crashes in production and tells you before your users do.
● low risk
Resend
for Email sending · resend.comTransactional email for password resets, receipts, and notifications.
● low risk
Upstash Ratelimit
for Rate limiting · upstash.comCaps how often your endpoints can be hit so paid APIs and login routes do not get hammered.
● low risk
Cloudflare Turnstile
for Spam protection · cloudflare.comInvisible bot-check on public forms before spam floods your inbox or database.
● low risk
Privacy Policy Starter
for Privacy & terms · termly.ioGenerates a real privacy policy and terms page from what your app collects.
● low risk
Auth.js
for Login & accounts · authjs.devDrop-in auth for email, Google, GitHub sign-in, and handled sessions.
● medium risk
Move Secrets to Env
for secrets · VibeProdFinds hardcoded API keys, tokens, and passwords in your code and moves them to environment variables.
● low risk
Enable Dependabot
for dependencies · github.comAdds a Dependabot config to automatically get PRs for outdated or vulnerable dependencies.
● low risk
Pin GitHub Actions
for ci · github.comPins all GitHub Actions to exact commit SHAs instead of mutable tags like v1 or latest.
● low risk
Add Basic CI Tests
for ci · github.comAdds a GitHub Actions workflow that runs your test suite on every push and PR.
● low risk
Harden Session Cookies
for auth · authjs.devAdds httpOnly, secure, and sameSite flags to your session cookies to prevent theft.
● medium risk
Add Audit Logging
for compliance · VibeProdLogs who did what and when — essential for debugging, compliance, and customer trust.
● medium risk