Leaks & reports

What AI-built apps are leaking

The ten leaks to fix before you ship, how the AI builders compare, and a per-builder breakdown — all from Shippable's real checks on public repos. Read-only, anonymized, no live app touched.

Patchy ticking items off a checklist on his clipboard
ComparisonWhich AI builder ships the safest apps?~1,460 public repos across five builders, ranked. Bolt and Lovable leak hardest; v0 is safest.GuideThe Vibe-Code Top 10The ten leaks to fix before you ship, each with a paste-in fix.

Per-builder reports

State of BoltBolt73% any issue36% criticalState of LovableLovable51% any issue20% criticalState of CursorCursor28% any issue5% criticalState of ReplitReplit25% any issue8% criticalState of v0v019% any issue4% critical

Check your own app

Paste your app's URL. It's free, read-only, and takes about a minute.

Before you push, scan your dev server instead: npx shippable-dev scan localhost:5173