BETA Shoulder is in beta — Findings may sometimes be wrong. Your feedback shapes what we fix next. Share feedback

Debug Mode Enabled in Production

Description

Detects hardcoded debug flags that expose sensitive information or enable debugging features in production.

What Shoulder detects

Debug flag at line {line} is hardcoded to true

How to fix

Use environment variables for debug/development mode configuration.

Applies to

Frameworks

express fastify nodejs

References

Scan for this issue

Detect with Shoulder CLI
npx @shoulderdev/cli trust --rule=javascript-debug-mode-production .

Related rules