New
Introducing React Doctor for Enterprise
Menu
Ship React without getting pwned.
Block vulnerable code and compromised dependencies before they reach production.
$ npx react-doctor@latest
View GitHub
Secure your codebase
PayPal
Rippling
Alibaba
PostHog
doctor
Bot
reviewed
2 days ago
app/checkout/payment-form.tsx
41
42
const stripe = new Stripe(
"sk_test_4eC39HqLyjWDarjtT1zdp7dc")
React Doctor
no-secrets-in-client-code
(warning)
Fix -> move this key to a server-only env var. Secrets in client code ship to every visitor.
See docs
Catches security issues in code review
Every pull request gets inline comments on the exact lines that leak a secret, open a vulnerability, or pull in a risky dependency, each with a plain-English explanation and a concrete fix.
All checks have failed
1 failing check
React Doctor
–– 1 blocked dependency • 2 vulnerabilities
Merging is blocked
Failing checks must pass before merging.
Blocks vulnerabilities before they merge
React Doctor runs as a required status check on every pull request, failing anything that leaks a secret, ships a known vulnerability, or adds a compromised package until it's resolved.
Learn more about CI
What users say

/goal get me to 100/100 in React Doctor score — you are welcome, this is why eval is everything.

George
OpenClaw maintainer

Give your AI coding agent a medical degree in React with React Doctor. A lightning-fast CLI that identifies code smells and bottlenecks.

Better Stack
betterstack.com

A little agent I wrote that runs react-doctor on your PR and roasts you based on react code-quality regressions against main is one of the best things I have done for our react code quality.

Kyle Mistele
CTO of HumanLayer

This is a next gen React linter with autofix. Opus 4.6 + React Doctor must definitely have a PhD.

ryoppippi
Founding Engineer at Rork

Already shipped a few PRs with react-doctor.

Mahesh
Founding Engineer at supermemory

React Doctor is now an instant install for any React codebase I work on.

Rob Knight
Founder of Zenbu, ex. Nextjs

We've been using React Doctor in production for weeks and it's been fantastic. Giving agents guardrails to autocorrect code according to best practices is integral in an agentic-heavy codebase.

Colin Armstrong
Founder of Paragraph, ex-Google

React Doctor just came out! A tool that detects anti-patterns in your React app: unnecessary useEffects, accessibility errors, and prop drilling you can avoid with Context.

Miguel Ángel Durán
Creator of midu.dev

I love trying out new toys Aiden makes. This week I took React Doctor for a spin on my Supercuts app and it scored a 77 — finding a really nice flow for cleaning up code with it.

Domitrius Clark
Senior Community Engineer at Netlify

Had Codex running on a goal of solving all React Doctor issues. It went to production today — the codebase is much more maintainable, with noticeable performance improvements.

Jake Casto
@0x15f