GitGud
A free browser-first developer toolbox — decode a token, format a payload, explain a cron line, check whether AI answer engines can read your site. Its differentiator is a contract, not a feature: a tool either runs entirely in your browser or it is flagged as server-backed, and nothing you paste is stored either way.
- Next.js
- React 19
- TypeScript
- TailwindCSS
- MongoDB
- SST
- AWS Lambda
- Vitest
- GitHub Actions
What I shipped into it
- 01
Built most of the toolbox — ten browser-side tools and five server-backed web tools (robots.txt tester, llms.txt generator, Open Graph preview, schema generator, status-code reference) — plus the registry and per-tool SEO metadata for all 28. Each tool is its own dynamic chunk, so a visitor downloads only the tool they opened.
- 02
Wrote the single SSRF guard every user-supplied URL passes through, and a per-IP rate limiter that reads the address the CDN observed rather than the one the caller claimed. No tool gets its own fetch, so there is exactly one thing to audit.
- 03
Turned the privacy claim into a test: it greps every tool for a network call and fails if the set that makes one differs from the set flagged server-backed. The count printed on the tools page comes off the same flag, so a wrong flag breaks the build instead of publishing a false claim.
- 04
Made CI a gate rather than a report — lint, typecheck, unit tests and a per-route JavaScript bundle budget all block the deploy, with the budget checker written for the purpose.
More screens
The landing page and tool index refresh.