About

It started as a text file — a running list of every way a deploy had gone wrong across a fleet of shipped web apps. A build script missing prisma generate that shipped a stale client. Relative imports without .js extensions that killed every serverless function after a green build. A Content-Security-Policy with no default-src, leaving every unlisted directive wide open. A full-resolution favicon quietly wrecking LCP on every page load.

The pattern was always the same: nothing failed loudly. The build passed, the deploy succeeded, and the problem surfaced hours or weeks later — usually to a user, occasionally at midnight on a Friday.

The list is now 30checks, and this runs them against any public repo. Every rule traces to something that actually broke. If a check can't point at a real incident, it doesn't make the list.