Throndar
Grade your codebase's post-quantum readiness A–F in your browser — nothing uploaded. Free GitHub Action + CycloneDX 1.6 CBOM. Open-source.
StackScope is a free public catalogue of indie launches. We find launches on Product Hunt, Hacker News and similar feeds, then crawl each site to detect its tech stack and score it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 5 July 2026; the live site may have changed since.
Throndar scores highly overall, with complete legal pages, a thorough launch checklist, and clean crawl signals. Visible gaps: no Content-Security-Policy and no email security records.
Launched on Hacker News on July 4, 2026. The site is hosted on Vercel, with a domain registered 2 weeks before launch. Our crawler found 9 technologies on this site, covering auth, CSS frameworks, DNS providers, and transactional email. The stack includes Auth.js, Next.js, and React.
It's also on one of the most common stacks we track, shared by 9,306 launches and more locked down than the typical Hacker News launch.
If you own this site, refresh the snapshot and see the full fix list any time →
Tech Stack (9) · Indie stack
| DNS |
Cloudflare DNS
|
| Hosting |
Vercel
|
| Security | HSTS |
| Transactional email |
Resend
|
| Auth |
Auth.js
|
| CSS framework |
Tailwind CSS
|
| Framework |
React
|
| JavaScript library |
Motion
|
| Meta-framework |
Next.js
(5)
|
Infrastructure
Email Security
Storage (2)
| Name | Lifetime | Detected as |
|---|---|---|
| __Host-authjs.csrf-token | session | Auth.js |
| __Secure-authjs.callback-url | session | Auth.js |
Readiness Breakdown How?
Performance How?
⚠ 2 images: 2 missing alt text
Indicative grade from a single automated render, not a substitute for Lighthouse or field data, and not part of the StackScope score.
Vibe Score Breakdown How?
| Signal | Points |
|---|---|
| Placeholder branding | +10 |
| AI copy signals | +5 |
| AI palette signals | +5 |
| AI writing signals | +5 |
This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.