RealityLint Tool Checks If Your README Matches the Actual Repository

·1 views

A developer has released RealityLint, an open-source static analysis tool designed to detect discrepancies between a project's README file and its actual repository contents. The tool checks for issues such as missing scripts, broken file paths, absent environment files, package manager mismatches, and outdated version or license claims. RealityLint parses README content without executing any commands, making it deterministic and safe to run locally or within GitHub Actions pipelines. It requires no API keys, LLMs, or source code uploads, and is installable via PyPI using pip install realitylint. The creator is actively seeking community feedback on which additional documentation drift checks would be most valuable, particularly for use in CI pipelines.

Read the full story at DEV Community

This is an AI-generated summary. ShortSingh links to the original source for the complete article.

Discussion (0)

How to Handle Environment Variables Safely in Node.js Apps

Environment variables are the standard method for keeping sensitive configuration like API keys and database URLs out of application source code. Developers should centralise env var access in a dedicated config module that validates required variables at startup and crashes immediately if any are missing. Tools like dotenv, envalid, and joi help load, type-check, and set defaults for these variables, reducing scattered process.env calls across a codebase. Secrets should never be hardcoded as fallback defaults, logged in full, or committed to version control — a .env.example file with placeholder values should be used instead. Separate credentials per environment, regular key rotation, and platform-native secret management tools further reduce the risk of accidental exposure.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Developer Builds Privacy-First Android App to Auto-Silence Phones Without Cloud

A developer created Muffle, an Android app that automatically adjusts phone sound profiles based on scheduled routines and location, after being inspired by a disruptive ringtone during a mosque sermon. The app was deliberately built with a zero-cloud architecture, meaning all data and logic remain entirely on the user's device. It uses Android's AlarmManager, ForegroundService, and GeofencingClient alongside a local Room database to manage sound rules without any server dependency. Prayer time calculations are handled on-device via the Adhan library, avoiding the need for cloud functions or external APIs. A key technical hurdle was Android's Doze mode, which delayed alarm triggers and required additional engineering to ensure timely sound profile transitions.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

Deleting an API Key From Your Profile Doesn't Kill It in Running Processes

A developer discovered that deleting three API keys from their shell profile and verifying the change with a clean-room shell test did not actually revoke access for already-running processes. A long-lived editor process that had launched days earlier had frozen the old environment variables at startup and continued injecting them into every child process it spawned, including a reconnected review tool that authenticated successfully with the supposedly deleted key. This exposed a critical distinction between editing a config file on disk and having that change take effect in live processes. The env -i verification command only tests newly spawned shells and cannot detect stale values held in memory by existing parent processes. The author concluded that confirming a config fix requires checking three separate things: the file on disk, the environment frozen in any long-lived parent process, and the inherited environment of each child process spawned from that parent.

0 comments Read more at DEV Community

ProgrammingDEV Community ·

A 41-Second Timeout Gap Silenced an Automated Affiliate Article System for 3 Days

A developer built a fully automated system using shell scripts and Claude Code to publish three affiliate articles daily to Hatena Blog without human involvement. For three consecutive mornings, the system ran without errors but produced zero articles, logging 'published today: 0 / target: 3' each time. The root cause was a misconfigured timeout set at 300 seconds, while the actual article-generation process required 259 seconds — leaving only a 41-second margin that was consistently exceeded. Doubling the timeout to 600 seconds resolved the issue immediately, restoring the system to its full three-article daily output. The system is designed around idempotency, meaning each scheduled run checks how many articles have already been published and generates only the remaining shortfall, ensuring the daily target is always met across morning, midday, and evening batches.

0 comments Read more at DEV Community