HTML Artifact Gate

Your HTML tool works on localhost. But will the folder your buyer actually receives still work after extraction?

HTML Artifact Gate checks the final release folder locally—without uploading or executing its application code—and produces a clear PASS, WARN or BLOCK report.

It checks

• missing local images, scripts, styles, pages and data files;
• case-only filename mismatches and paths escaping the package;
• external runtime resources and network-capable APIs;
• ES modules, local fetches, service workers and absolute-root paths that can fail under file://;
• high-risk DOM sinks, dynamic code and script creation, and unsafe new-tab links;
• localhost URLs, machine-specific paths, TODOs, unresolved placeholders and source maps;
• missing entry point, start guide, license, version/changelog and example files.

You get

• the standalone offline scanner;
• three policy modes: truly offline, local-first and networked by design;
• exportable standalone HTML and JSON reports;
• clean and deliberately broken example packages;
• start guide, limitations, changelog and single-user commercial-use license.

Privacy

No account. No analytics. No upload. No network request. Selected files stay in the browser tab and selected application code is read as text, not executed.

Requirements

Current desktop Chrome, Edge, Brave or another Chromium browser is recommended for folder selection. Other modern browsers can use multi-file selection.

Honest boundary

This is a static release-preflight tool, not a penetration test, malware scanner, legal review or security/privacy certification. PASS means no issue was found by the current rules—not that a package is vulnerability-free.