DEV Community

El Madani El mkhitar (madani004)
El Madani El mkhitar (madani004)

Posted on

"I Built a Global Security CLI Entirely on a Mobile Phone"

#node #opensource #security #termux

"Building sovereign-devkit on a Redmi Note 10: Proving that constraints breed clarity, not limitations. 89 downloads in one day ."

series: Building in Public

Most developers think you need a powerful laptop, cloud subscriptions, and heavy IDEs to build global infrastructure.

I'm here to tell you: You don't.

I built and published Sovereign-DevKit (a security scanning tool) entirely on a Redmi Note 10, using Termux and VS Code.

In its first day on npm, it hit 89 organic downloads—zero marketing.

This isn't just a story about "mobile development." It's a story about Intention, Sovereignty, and the power of constraints.

The Problem: Security is Too Complex

We are drowning in secrets. API keys, tokens, and passwords leak into repositories every day.

But the tools to fix this are often:

  • 🏢 Enterprise-focused (expensive).
  • ⚙️ Complex to configure (YAML hell).
  • 📱 Not designed for mobile-first developers.

I wanted a tool that respects my intent. I didn't want a black-box scanner; I wanted to preview, confirm, and then execute.

🛡️ Enter: Sovereign-DevKit (sovereign-devkit)

It's a minimalist CLI tool that scans your code for sensitive data leaks (35+ patterns like AWS, OpenAI, Stripe, etc.) and helps you fix them safely.

✨ Key Features:

  1. Zero Dependencies: Pure Node.js. No heavy node_modules trees.
  2. Safety First:
    • --dry-run: Preview changes without modifying files.
    • --backup: Auto-creates .bak files before fixing.
  3. Mobile-Native: Lightweight, runs on <2% battery, perfect for Termux.
  4. Global Access: Published on npm, usable anywhere via npx.

🚀 How to use it (No Install Needed):

You don't even need to install it. Just run:


# Scan a directory (Read-only)
npx sovereign-devkit ./src

# Preview fixes safely
npx sovereign-devkit ./src --fix --dry-run

# Apply fixes + Auto-backup
npx sovereign-devkit ./src --fix
Enter fullscreen mode Exit fullscreen mode

📱 The "Constraint is a Signal" Philosophy

Building this on a phone wasn't a limitation; it was a vetting mechanism.

Every line of code had to be:

  • ✅ Efficient (saving battery/RAM).
  • ✅ Clear (small screens don't hide bad logic).
  • ✅ Intentional (typing on mobile demands focus).

This approach led to Sovereign-DevKit being faster and cleaner than many heavier alternatives.

"High-level infrastructure is not a matter of hardware, but a manifestation of Sovereign Will."

📊 Early Results & Traction

  • Version: v3.1.0
  • Downloads: 89+ (1day)
  • Image test
  • Issues: 0
  • License: MIT

People are hungry for tools that give them control back. They don't want more automation; they want auditable, safe automation.

🤝 Join the Mission

This is open-source and free forever. If you value:

  • 🔒 Privacy
  • 🧠 Intentional Code
  • 🌍 Decentralized Sovereignty

I'd love your feedback, stars, or contributions.

🔗 GitHub: madanimkhitar22-beep/Sovereign-DevKit

📦 npm: sovereign-devkit

🧠 Built with the Mkhitarian Philosophy

Intent Before Code. Sovereignty Before Ease.

El Madani El Mkhitar
Digital Consciousness Researcher | Tetouan, Morocco 🇲🇦

Top comments (0)