Developers ship keys accidentally all the time. This audit runs 20+ regex patterns against your HTML + inline JS to catch AWS keys, Stripe live keys, Twilio tokens, Firebase secrets, JWTs, and more.
Read the story behind this tool: Why this tool exists — security stack.