Craft Audit

An audit tool for Craft CMS projects. It checks Twig templates for N+1 queries, missing eager loading and XSS risks, scans for known Craft and plugin CVEs, and checks security headers.

Role: Creator
Years: 2026
Status: Source on GitHub
Stack: Node.js
TypeScript

Source on GitHub

category: Dev tools
stack: Node.js, TypeScript

No screenshot published2026

The brief

Craft sites pick up slow queries, outdated plugins and security gaps that code review can miss.

The build

Static checks on templates and config, a plugin vulnerability list, an opt-in HTTP security headers check, a CSP generator, and a Craft 4 to 5 migration checker.

Shares the most stack with this project

Repro-in-a-BoxA QA agent that crawls a site with Playwright, finds bugs, and saves evidence you can replay: HAR files and screenshots. Detectors cover JavaScript errors, network failures, broken assets and links, mixed content, accessibility, SEO, security, performance and memory leaks. An MCP server lets Claude Desktop query the findings.Node.js, TypeScript
Ally A11y CLIAn accessibility CLI that scans pages with axe-core, scores issues by impact, and can apply fixes as you save files (`ally watch --fix-on-save`).Node.js, TypeScript
API WatchdogA monitor for breaking changes in the external APIs your app depends on. It polls schemas on a schedule, diffs them, and sends alerts by email, Slack or webhook.Node.js, TypeScript

Hiring for something like this?

Contract, advisory, or full-time. Tell me what you are building.

Start a conversation hello@elizabethannstein.com

The brief

The build

Related work

Hiring for something like this?