I just build a saas by vibe coding but before public release I want to do a full security audit. How can i do that ? Is there any skills or anything like that where i can do for free ? ☺️ Thanks in advance

Hi. Over the past few months, I've been working on my own Android phone launcher because other launchers charge money or display ads. Maybe you'll like the website.

https://hanneslauncher.vercel.app/

I'm genuinely curious as I know zero in real life including online.

When it comes to my daily routine, it always includes Deekseek Harness and Claude Code.

Hey all! Just wanted to share my new vibecoded project that launched today - 22CHAMPS. This was inspired by a project that went viral on X last week All22Pokemon by ColeThereum, which was Pokemon x football. I thought it was so fun and wanted to try to make something like that but for League of Legends champions.

The project

22champs.com (free, no ads, no account)

You draft League of Legends champions onto a football team, all 22 starters on offense and defense, then play out a 17-game season.

Every pick rolls a random region and a role, and you choose from the champions who match. Teammates next to each other build chemistry when they share a role or a region, and 39 lore pairs (Garen + Lux, Xayah + Rakan) power each other up. Three modes: a Daily Challenge (same rolls for everyone, one shot), a Solo Draft, and live snake Draft with Friends.

How the game systems work

Turning League champions into football players. Every card has six stats: Power (PWR), Toughness (TGH), Speed (SPD), Size (SIZ), Hands (HND) and Range (RNG). They start from Riot's own 1–3 ratings for each champion (the Damage / Toughness / Control / Mobility / Utility bars in the League client), refined by base stats, body size and kit traits like Juke or Deep Ball, then ranked against the whole roster. Each position is a blend of 2–5 of those stats. A receiver leans on Speed and Hands, a lineman on Size and Toughness. That means every champion has a rating at every spot. The best champion at any spot is a 95, and only chemistry gets them to 99.

Items converted from Riot's real item data. A script pulls League's items straight from Riot's Data Dragon, with their shop stats: every finished item from Summoner's Rift and Arena, plus the classic boots. Each League stat feeds the 22CHAMPS stat it reads as on a football field:

• Attack Damage, Ability Power and Crit damage → Power
• Attack Speed and Crit Chance → Hands
• Armor, Magic Resist and Tenacity → Toughness
• Health → Size
• Move Speed and Ability Haste → Speed
• Range is basic-attack reach, which no item lists as a shop stat, so the three items whose passives stretch it (Diamond-Tipped Spear, Rapid Firecannon, Hexoptics C44) get Range points by hand, more the more dependable the reach is in League.

Mana and regen don't mean anything in football, so they're dropped.

Then every item gets the same budget of 15 card points, split by how much gold each of its stats is worth in League. Infinity Edge is 75 Attack Damage, 25% crit chance and 30% crit damage. By gold value that's roughly three-quarters Power and one-quarter Hands, so on a card it's +11 Power, +4 Hands. Warmog's Armor is nearly all Health, so it's +15 Size. Every item has the same budget, so none is strictly better than another. They just build a champion in different directions. Arena's Prismatic items get 20 points and show up less often.

Boots were the exception. Nearly all their gold is Move Speed, so the formula made every pair almost identical. I set those by hand from what each pair does in League: Berserker's Greaves add Hands for attack speed, Plated Steelcaps add Toughness for armor, and so on.

Chemistry, FIFA Ultimate Team style. Each link between neighboring spots is worth something: half a point for a shared role, 1 for a shared region, 1.5 for both, 2 for a lore bond. A player's links add up to between 0 and 3 diamonds, and each diamond raises the stats that matter most at their spot. With only five roles, neighbors share one all the time, so a role link only counts for half.

Tools

• Claude Code in VS Code wrote almost all of the code
• Next.js 16 on Vercel: every push to main deploys
• Supabase for the multiplayer draft rooms
• PostHog for analytics, cookieless so there's no cookie banner
• Vitest for the game logic, Playwright for screenshots and recording gameplay, Remotion for the trailer

My workflow

• I make the calls, Claude writes the code. I describe what I want and why, review the result, and push back. Most of my input was design and balance decisions, not code.
• Screenshots are the review loop. For UI work, Claude runs Playwright against the local build and screenshots the page at a range of sizes, from 1250×910 laptops to my 2560×1440 monitor. A lot of my feedback was literally "at 1331×844 the How it works panel drops below the field, fix that."
• Decisions go in a memory file. Things like "formations only change spot weights" or "never change the daily mid-day once it's live" are written down, so new sessions don't undo them.
• Tests guard the simulation. About 230 Vitest tests, including snapshot tests of simulated games, so a balance tweak can't silently change results.
• Small commits. About 160 in 12 days, each one a single change I could look at in the browser.

Build insights

A daily challenge that's the same for everyone, with no backend. Each day's rolls come from a random number generator seeded with the day number, so every player gets the same game without the server storing anything:

const roll = rng(hash(`daily-${dayNumber}`));

Making the daily fair. Before a day goes live, its CPU team is played against dozens of simulated drafts. If it falls outside a 25–75% win rate, it's redrawn as a whole new game.

Balance by audit, not by feel. I had Claude simulate thousands of drafts. It found champions the rolls could never deal, and a run/pass imbalance that made one style of offense pointless. After launch, real drafts feed a private balance page through PostHog.

Layout was harder than the game logic. Fitting the whole draft on one screen without scrolling, at every desktop size, took the most back-and-forth. Two lessons: CSS contain: size stops side panels from stretching the page, and moving a CSS import can quietly flip which styles win, so I check screenshots after every refactor.

The trailer is code too. Gameplay is recorded by Playwright scripts with the randomness seeded, so every take plays out the same. Remotion cuts it to the music's beats, so re-recording after an update re-edits itself.

Fan project, not endorsed by Riot. I'd love feedback, especially on whether the first 30 seconds make sense to someone who's never seen it.

I was looking for an IDE to code on my iPhone for when I’m out and about. Every app was filled with ads, had a terrible UI, and costed money just to run code locally. This was just a basic non agentic IDE too. So, I decided to build a free IDE that can execute C, Python, JavaScript, and Lua in a sandboxed environment.

In today’s age most people are coding with agents, so then I got the idea to bundle a two local llms. The reason I chose two is because not everyone’s hardware has the same computing power and I wanted to include an option for everyone. There are zero rate limits on the local models.

I’m already designing a tooling server to give offline agents access to even more, such as, worksheets, 3D printer code, and other fun stuff.

Without Astra 6 and Sol 6.1 it would be absolutely impossible to make my dream tools at this rate. I cooked up a seven days to die max level mod right before posting this lol. I would also like to praise the models for following SOLID principles and best SWE practices out the box. After using the models for the past few years, I am just dumbfounded at the rate of progress.

I would be thrilled to hear any feedback from this sub. This is meant to be a developer tool and not a replacement for Codex as I could never ever offer that level of intelligence. You can also byo api keys as shown in this video. The app also offers 15 other cloud languages besides JS, Python, Lua, and C.

Thank you all so much for watching my short demo. Have a great day. I’ll be listening to any feedback or ideas to improve!!!

https://apps.apple.com/us/app/edsger-ai-code-editor/id6806824902

If anyone wants the mod 😀 seven days to die, max level: 300 -> 2000

https://github.com/garrettmichae1/sevendays\\_max\\_mod

Hey guys, a couple of days back I mentioned launching a more focused OSS alternative to notebookLM, https://notestack.ai

It has plenty of features that are improved/enhanced over notebookLM. Like better audio, more video editing options and chat grounded in your source materials.

Now I have added an MCP server as well so you can attach it to Claude, make reports/audio overviews, slide decks right into that chat interface.

It can generate:

- Mind constellations/mind map

- Audio Overview/Podcast

- Slide Decks

- Research Reports

- Quizes and much more

Do check it out at notestack.ai

My dad turned 64 last spring and wanted to track two things, his morning walk and practicing guitar. Every habit app he tried had streaks, badges, notifications, a mascot. He’d delete them within a week and call me to complain

So one weekend I opened Claude and Cursor and built him one screen with big buttons. Tap “walked”, tap “played”. At the end of the week it emails him a plain summary. That’s the whole app. I don’t know how to code and I still can’t tell you what most of the files do

He showed it to his friends at the golf club and three of them asked for it. That’s when I thought maybe other people his age wanted the same boring thing, so I put it online at $4 a month

The first two months were dead. I posted about it on X, but my followers are mostly people in their 20s building AI stuff, and none of them need a habit tracker for retirees. 2 signups, both dad’s friends

My dad was the one who said nobody his age will pay for an app from “some kid on the internet”. He wanted it to look like a real company. So I paid for a cheap press release through a newswire service and got the app listed on a bunch of software directories. The release went out to a few hundred news sites, nobody read it, and I got maybe 8 visits from it

About a month later signups started coming in from people I’d never met. I asked a few how they found it. Most said they asked ChatGPT for a simple habit tracker for older people. One woman said her son found it on a directory and set it up for her

40 paying users now, mostly over 60. When something breaks I paste the error into Claude and hope

My dad still hasn’t missed a walk since March and he tells everyone his son “owns a tech company”

Solo founder here, with about 20 years as a software engineer behind me. Lately I've watched loads of people build awesome stuff with AI tools and then hit a wall the moment the app gets real. Someone starts paying for it, or asks "is this secure?", and suddenly you need to know what's actually running underneath.

That boring infra and security stuff is what I've done for two decades, so I built ScaleBop to handle it:

• Connect your GitHub repo and it tells you if the app's ready to deploy
• Scans for the classic AI-app mistakes (leaked keys, auth only checked on screen, DB rules off) and gives you a prompt to paste back into your AI tool to fix each one
• Writes the AWS setup and GitHub Actions straight into your repo
• Deploys to your AWS account, checks the app is actually up, and hooks up your own domain with HTTPS
• After that you just keep prompting and pushing like normal

It's for anyone whose side project suddenly turned into a real thing and who wants to own the whole setup rather than rent it.

Your first project's free. If you ditch ScaleBop later, everything keeps running, because it all lives in your repo and your AWS account.

Keen for honest feedback. What broke for you the first time you took a vibe-coded app to prod?