Tech Debt Sweep

Most codebases accumulate debt silently — unused dependencies inflating bundle size, TODO comments from six months ago nobody remembers, API keys accidentally committed, files that should never have been checked in. Tech Debt Sweep is a single bash script that scans your project and produces a clean markdown report in seconds.

No dependencies to install. No configuration. Point it at a directory and get results.

Six automated checks:

1. Duplicated code patterns — finds functions defined with the same name across multiple files
2. Unused dependencies — cross-references package.json against actual imports
3. Stale TODOs — flags TODO/FIXME/HACK comments in files not modified for 7+ days
4. node_modules in git — catches the classic mistake of committing dependencies
5. Large files — finds files over 1MB that bloat your repo
6. Hardcoded secrets — regex detection for AWS keys, Stripe keys, GitHub PATs, JWTs, Slack tokens, Google API keys, PEM private keys, and hardcoded passwords

CI-ready: exits with code 1 when issues are found, so you can gate merges on a clean sweep. Works as a pre-commit hook, weekly cron job, or on-demand audit.

Why this is worth $2: You could write these checks yourself in an afternoon, but you would spend that afternoon instead of shipping features. This is tested, handles edge cases (false positive filtering, cross-platform date handling, self-exclusion from secret scanning), and produces a report you can share with your team or track over time.

Includes SKILL.md with full documentation and the complete sweep.sh script. Works on macOS and Linux. Requires bash 4+ and Python 3 (for dependency parsing only).