lynprod

Production-readiness CLI for Expo / React Native mobile applications.

Lynprod helps you audit, verify, and assess production readiness locally — with deterministic checks, machine-readable reports, and evidence-backed runtime verification.

Install the npm package @lynsoft/lynprod, then run the lynprod CLI.

Requirements

• Node.js 24+

Install

npm install -g @lynsoft/lynprod
lynprod --help
lynprod init
lynprod ready
lynprod audit
lynprod verify

Or without a global install:

npx @lynsoft/lynprod --help
npx @lynsoft/lynprod audit

Commands

| Command | Behavior | | --- | --- | | init | Prepares Lynprod config / readiness prerequisites. Does not execute app.config.js/ts, install tooling, or decide READY. | | audit | Static analysis only — never executes application code. | | ready | Evaluates production readiness (READY / NOT_READY / UNVERIFIED). May run runtime verification when applicable. | | verify | Opt-in runtime verification plan (device/simulator tooling for real Expo evidence). |

Shared options include --path, --format terminal|json (audit also supports sarif), and --ci for non-interactive CI defaults.

Optional run export

lynprod audit --format json --emit-run ./run.json

--emit-run <path> writes a versioned LynprodRun envelope (schema 1) wrapping the command result. It is opt-in, creates no network traffic, and does not change audit/verify/ready exit-code semantics. Export failures are reported on stderr separately.

UNVERIFIED (e.g. no simulator / agent-device) is often an honest evidence gap, not a product failure.

Capabilities

• Local static production audits (including Expo / React Native rules)
• Local runtime verification plans (including mutation-idempotency / fault-injection styles)
• Terminal + JSON reports and deterministic exit codes
• CI-compatible local execution without an account
• Official Community rulesets

Cloud upload, hosted history, orgs, and Pro license enforcement are not part of this package.

Trust & privacy

• Local-first: default CLI paths do not upload your repository
• No hidden telemetry or Cloud network behavior in the default path
• Fake runtime providers never masquerade as real device evidence
• Secrets must not appear in findings/reports; treat caches and reports as sensitive

Runtime prerequisites (optional)

init, audit, and static ready paths do not require simulators or agent-device.

Real Expo runtime evidence may require optional tools (iOS Simulator + agent-device) installed separately. Lynprod never auto-installs them.

License

LynProd (@lynsoft/lynprod) is proprietary software licensed by Lynsoft LLC. See LICENSE.

Bundled third-party components remain under their own licenses; required notices are in THIRD_PARTY_NOTICES.