I scanned 25 vibe-coded apps. The API keys were fine. The server wasn't.
Everyone's favorite vibe-coding horror story is the API key pasted into the frontend. So I went looking for it. I took 25 public vibe-coded apps on GitHub, scanned every file and every line of their git history, and then read their server code by hand. The keys were fine. Not one leaked. What I fou…
Read the full story at DEV Community — AI ↗
Timeline · 1 report
- 2026-11-01 21:15 · DEV Community — AI
I scanned 25 vibe-coded apps. The API keys were fine. The server wasn't.