shouldivibecodeit

What makes it a bad idea

canivibecodeit catalogues moats — the structural reasons an incumbent survives. This is the mirror image: the structural reasons your version of it should not ship. Every entry carries one to three of these.

risk tags · 149 entries tagged
🪪 Personal data46

A leak here is a disclosure notice, not a bug report.

♾️ Forever maintenance46

You are not building a thing, you are adopting one.

🎣 Abuse surface29

Spammers, scrapers and scammers will find it before your users do.

🗑️ Data loss24

One bad migration and the only copy is gone.

🔑 Secrets & credentials19

You are storing things that unlock other things.

📟 Someone else’s uptime18

A person who did not choose your code depends on it staying up.

👨‍⚖️ Legal liability17

There is a contract, a licence, or a lawsuit downstream of the bug.

🕳️ Irreversible15

You cannot ship a fix for the thing that already went out.

⚖️ Regulated14

A regulator has written down opinions about this exact thing.

💸 Money movement6

It moves other people’s money. Off-by-one is now a refund request.

📈 Scale cliff5

Fine at ten users. On fire at ten thousand.

💳 Card data2

Touching raw card numbers drags PCI DSS into your side project.

🚪 Rolling your own auth2

The single most confidently-generated, most subtly-broken code there is.

☠️ Safety critical1

The failure mode involves a physical human being.

🏥 Health data0

Medical information carries its own body of law and no sense of humour.

green flags · the counterweight
🏠 Local only

Never leaves your machine, so it never leaks.

🧍 Single user

The entire blast radius is you.

👀 Read only

It can be wrong, but it cannot destroy anything.

🧻 Throwaway

Built to be deleted. No migration path required.

🆓 No money

No payments, no billing, no chargebacks.

↩️ Easily reversible

Undo is a `git revert` and an apology at most.

how the regret score is calculated

Six dimensions, each scored 0–10 by a human, combined with the weights below into a number out of 100. The verdict on a page is editorial and can override the maths — but never by more than one band, and the validator fails the build if it does.

25%blast radiusjust mestrangers
20%data sensitivitynothinghealth / credentials
15%security surfacelocalhostinternet + auth + money
15%regulatory exposurenoneHIPAA / PCI / licensed
15%irreversibilitydelete the repocan’t unring the bell
10%maintenance taxone-offyours at 3am, forever

0–24 SHIP IT · 25–49 DEMO ONLY · 50–74 YOUR FUNERAL · 75–100 ABSOLUTELY NOT