How to Check if Your Vibe-Coded App Is Leaking API KeysA plain-English checklist to find secret API keys hiding in your Lovable, Bolt, v0, or Cursor app: in the browser code, in .env files, in source maps, and in GitHub history. Plus what to do if you find one.9 min read·vibevigil.hashnode.dev17h ago
How to Check if Supabase RLS Is Enabled (and Actually Working)A plain-English checklist to see if Row Level Security is on for every Supabase table, find policies that let everyone in, and fix it with a copy-paste prompt for your coding agent.9 min read·vibevigil.hashnode.dev118h ago