Cinderella
A free, transparent valuation for any public GitHub project — readiness score and suggested price range, no sign-up.
Estimated origin: United States
StackScope is a free public catalogue of indie launches. We find launches on Product Hunt, Hacker News and similar feeds, then crawl each site to detect its tech stack and score it for launch readiness: DNS, security headers, SEO basics. This page is what we saw on 25 August 2026; the live site may have changed since.
Cinderella ships with the launch fundamentals in place, with complete legal pages, a thorough launch checklist, and well-configured email security. What needs work: missing Content-Security-Policy and Strict-Transport-Security.
Launched on Hacker News on August 25, 2026. The site is hosted on Render and served through Cloudflare, with a domain registered 2 weeks before launch. Our crawler found 11 technologies on this site, covering analytics, auth, CDN, and DNS providers. The stack includes Auth.js, Next.js, and React.
It's also one of 35 launches on this exact stack and tighter on security headers than most Hacker News launches.
If you own this site, refresh the snapshot and see the full fix list any time →
Tech Stack (11) · Indie stack
| CDN |
Cloudflare
|
| DNS |
GoDaddy DNS
|
| Hosting |
Render
|
| Protocol | HTTP/3 |
| Business email |
Google Workspace
(3)
|
| Transactional email |
Resend
|
| Analytics |
Plausible
(3)
|
| SEO |
Google Search Console
|
Infrastructure
Email Security
Storage (3)
| Name | Lifetime | Detected as |
|---|---|---|
| __Host-next-auth.csrf-token | session | Auth.js |
| __Secure-next-auth.callback-url | session | Auth.js |
| Key | Size | Detected as |
|---|---|---|
| nextauth.message | 74 B | Auth.js |
Readiness Breakdown How?
Performance How?
⚠ 1 images: 1 oversized
Indicative grade from a single automated render, not a substitute for Lighthouse or field data, and not part of the StackScope score.
Vibe Score Breakdown How?
| Signal | Points |
|---|---|
| AI palette signals | +5 |
| AI writing signals | +5 |
This score is based on structural patterns and is not definitive. Many legitimate sites may trigger signals, and AI-built sites may go undetected. It should be treated as an indicator, not a verdict.