ssookra/reach-checkv0.3.11Public
Reach check
See what a Play actually reaches on this machine before you publish it or run it.
Read the full description
rote play inspect shows what a Play declares and resolves those declarations against your host. This reads the step bodies themselves, follows sh -c, python3 -c and @resource files, and reports the executables, imports, adapters, browser steps, environment variables and writes they really touch, together with which of them are missing here. It also flags argv paths that point at a user home directory or do not resolve here, which is how a published Play ends up running only on its author's machine. It never runs, imports or pulls the Play it reads, and it writes nothing. The one subprocess it runs is rote play inspect, to report rote's own verdict beside this one, and offline=true skips it. It runs its own positive and negative cases before the scan, on your machine, against the same reader the scan uses, and refuses to call the scan trustworthy if any of them fail. The negative half is the one that matters, because the cheap wa
Before you run it2 local tools
Everything here is checked on your machine when rote inspects the play. This page never learns what you have installed or which credentials you hold.
- ○python3local tool
Must be on your PATH when used. minimum version undeclared.
- ○rotelocal tooloptional
Must be on your PATH when used. minimum version undeclared.
Inputs4, all optional
rote asks for these before running and shows the defaults it will use.
- Play
playWhat to read: all, an owner/name reference such as modiqo/hello, or a path to a Play package directory. Use the path form on a Play you are writing, before you publish it.
optionalstringdefaultallcustom value allowed - Flows root
flows_rootDirectory holding installed packages. Change it to read a rote store other than the default one.
optionalstringdefault~/.rote/flowscustom value allowed - Strict
strictSet to true to exit non-zero when any analysed Play reaches something that is missing on this machine. Off by default, because a finding is information rather than a failure.
optionalstringdefaultfalsecustom value allowed - Offline
offlineSet to true to skip the one step that calls rote play inspect, so the run makes no network call at all.
optionalstringdefaultfalsecustom value allowed
What it changes
No write operations are declared in this version's manifest.
Credentials remain in the recipient's local rote vault; this page and the publisher never receive them.
Runtime details
- rote CLIversion 0.62.0 or newer
- Servicesnone declared
- Digest
sha256:fcacd7b56a364030a1911b89a46eb926bbb709c3f1e76705e5292ac99956352d - Archive size43656 bytes
- Published2026-09-04T03:04:49.345889+00:00
- Published withrote 0.78.0
Credential values and current readiness remain local. Opening this page never prompts for a credential, opens an authorization browser, or calls a service this play uses.
A play is a published, versioned automation package that runs on your own machine through rote, a free command-line tool. Opening this page installs nothing and runs nothing.