Margyn

Proves your checks do not check anything. Every finding ships a reproduction.

The scanner runs on the server against a local path. The secret API key never reaches this page: the browser holds a short-lived userVerificationToken and the server exchanges it. A licence is signed server-side and checked offline, so margyn --mutate works on a CI runner with no network.