CDK Insights

What it does

CDK Insights scans your AWS CDK stacks for security misconfigurations, cost waste, and best practice violations 🔒 Local-first: your code never leaves your machine ⚡ Zero friction: no signup, no API keys, just npx cdk-insights scan 🆓 Free forever: 100+ rules, 35+ AWS services, JSON/Table/Markdown output 🤖 AI explains why issues matter, not just what's wrong 🔗 CI/CD ready: GitHub Action with PR comments Ship fast without shipping insecure.

CDK Insights uses AI and static analysis to audit your AWS CDK stacks, surface hidden issues, and suggest best practices before they become problems. Static scans free forever via npm - sign up free to add AI analysis.

Find security, cost, reliability, and operational risks in your AWS CDK stacks. Get source-level evidence and practical fixes before a change reaches AWS. This bucket stores receipt data but allows anonymous reads. Anyone who discovers an object URL could access customer documents outside your application. Generic scanners stop at generated infrastructure. CDK Insights keeps the CDK context attached, so developers can understand a problem and act on it without becoming CloudFormation detectives. Move from a generated CloudFormation resource to its construct path, source file, and line without searching the synth output. Use the rich default model for clear explanations, or choose a deeper…from cdkinsights.dev

• 
  Learn and Deploy AWS Serverless Patterns Today Using AWS CDK2020 · github.com · ▲16

  This is intended to be a repo containing all of the official AWS Serverless architecture patterns built with CDK for developers to use. All patterns come in Typescript and Python with the exported CloudFormation also included. - cdk-patterns/serverless

• 
  hop.js2025 · hopjs.bunny.net · ▲129

  A fast, free, privacy-first CDN for open-source projects

• 
  KeyLeak Detector – Scan websites for exposed API keys and secretsNov 2025 · github.com · ▲30

  I built this after seeing multiple teams accidentally ship API keys in their frontend code. The problem: Modern web development moves fast. You're vibe-coding, shipping features, and suddenly your AWS keys are sitting in a tag visible to anyone who opens DevTools. I've personally witnessed this happen to at least 3-4 production apps in the past year alone. KeyLeak Detector runs through your site (headless browser + network interception) and checks for 50+ types of leaked secrets: AWS/Google keys, Stripe tokens, database connection strings, LLM API keys (OpenAI, Claude, etc.), JWT…

• 
  Fastly Free Accounts2024 · fastly.com · ▲83

  Build something amazing! CDN, Observability, KV Store + more

• 
  GreenOps ScanAug 2026 · greenops.cloud · ▲3

  GreenOps Scan now proactively detects deprecated Lambda runtimes, RDS/Aurora/DocumentDB engines, EKS versions, ElastiCache Redis, and OpenSearch domains before AWS starts billing you extra for staying on them.

• 
  Auditly — Scan before you shipJun 2026 · ▲3

  Free security scan that tells you exactly how to fix it

• 
  /dev/null▲483

  a social network for devs

  Dev tools · 3d ago · dev-null.sh

• 
  Whiteboard (YC W26) – an open-source IDE for thoughtful software design▲423

  open-source IDE for thoughtful software design. Contribute to devdotfast/whiteboard development by creating an account on GitHub.

  Dev tools · 27d ago · github.com

• 
  Reladraw – A diagram language where you decide where to place things▲411

  Contribute to reladraw/reladraw development by creating an account on GitHub.

  Dev tools · 25d ago · github.com

• 
  OpenBot▲362

  Grok Bot alternative: free, local, open-source, multiplayer

  Dev tools · 23d ago · openbot.run

• 
  Talanoa▲345

  Hi HN, I’m a fullstack developer, and honestly, I’ve lost count of how many side projects I’ve worked on over the years. But one idea kept coming back to me: a different kind of email client. It first came to me in 2014: “What if we could handle emails more like conversations?” Every year, I’d revisit this concept in my “Build Notes.” Ten years later, no one had built exactly what I had in mind — so I finally decided to do it myself. That’s how Talanoa was born. I wanted something focused on people, not timelines. I was tired of marking messages as unread just to remember to reply later, or…

  Dev tools · 20d ago · talanoa.email

• 
  CoreSpeed▲332

  One MCP for everything your agents need: apps, memory, tools

  Dev tools · 28d ago · corespeed.io

• 
  Brila▲1,364

  One-page websites from real Google Maps reviews

  AI · Apr 2026 · brila.ai

• AG
  A game where you build a GPU▲964

  Thought the resources for GPU arch were lacking, so here we are

  Life & fun · Apr 2026 · jaso1024.com

• 
  I built a tiny LLM to demystify how language models work▲915

  Built a ~9M param LLM from scratch to understand how they actually work. Vanilla transformer, 60K synthetic conversations, ~130 lines of PyTorch. Trains in 5 min on a free Colab T4. The fish thinks the meaning of life is food. Fork it and swap the personality for your own character.

  AI · Apr 2026 · github.com

• 
  Fathom 3.0▲800

  AI meeting notes: now bot-free, in ChatGPT & Claude + more

  AI · Apr 2026 · fathom.ai

• 
  Brutalist Concrete Laptop Stand (2024)▲786

  I made a laptop stand out of solid concrete, in the style of brutalist architecture, with themes of urbex and urban decay

  Life & fun · Apr 2026 · sam-burns.com

• 
  I built a frontpage for personal blogs▲783

  With social media and now AI, its important to keep the indie web alive. There are many people who write frequently. Blogosphere tries to highlight them by fetching the recent posts from personal blogs across many categories. There are two versions: Minimal (HN-inspired, fast, static): https://text.blogosphere.app/ Non-minimal: https://blogosphere.app/ If you don't find your blog (or your favorite ones), please add them. I will review and approve it.

  AI · Apr 2026 · text.blogosphere.app