mandeun/cli

Tells you which of your projects are rotting.

Once you have five or six going at once, you stop remembering which ones stalled. Where you left off, what you never committed, whether a secret file rode along into the repo — all of it slips by.
Nothing to write down. It reads what git already knows and judges it.

~/download

Download for Windows mandeun.bat · 2KB · Windows 10+ Download for macOS mandeun-mac.zip · 2KB · macOS 11+

Free. No account, no sign-in.

~/first-time

Press the button for your computer above. One small file downloads. Windows on top, macOS below. The one you are using is tagged "your computer".
Move that file into the folder that holds your projects. The folder where your work sits, one folder per project. If ~/dev contains "shop", "blog" and "scratch", drop it into ~/dev.
Double-click it. A black window opens and shows the result. On macOS, unzip it first, then the very first time open it with right-click → Open. A plain double-click is blocked because the file is not signed by an identified developer.
If something is missing, the window asks you. Press Y and Enter and it installs itself. One thing is missing. Install it now? (press Y then Enter / Enter alone skips):
This means it worked. Any key closes the window. 3 things you are missing api-server .env is tracked by git landing-page 12 uncommitted files, untouched 21d side-bot untouched for 47d

What does it actually do? It walks your folders and finds what you have not touched in a while, what you never saved, and any secret file that slipped into the repo.

Does it take my code? No. It only looks at file names. There is no code in it that opens a file. And it sends nothing anywhere — unplug the internet and it behaves the same.

Does it install anything? No. What you downloaded is a dozen-line text file you can open in any editor. It fetches what it needs at run time and throws it away.

What if it fails? Copy whatever the black window says and send it to [email protected]. Everything needed to find the problem is in that text.

~/if-you-live-in-a-terminal

> npx mandeun-cli

Run it from the folder that holds your projects. Nothing gets installed — npx fetches it, runs it once, throws it away. It picks English or Korean from your system; --lang en pins it.

~/phone

One more line puts it on your phone. The address is yours alone. No signup, no login — a random key is made on first run and kept on that machine.

$ npx mandeun-cli send
https://b.mandeun.com/u/u-3f9a2c...

Open that on your phone and “Add to Home Screen” — it installs like an app. The last briefing stays readable with no signal.
That address is also the password. There is no login, so anyone holding it can read it. npx mandeun-cli forget erases it; anything older than 30 days is dropped automatically.

~/daily

One more line and it rescans every morning at 7 on its own. The page on your phone stays current without you touching anything.

$ npx mandeun-cli schedule
every morning at 7 it will rescan this folder:
  /Users/me/dev
the page on your phone stays current on its own.

Task Scheduler on Windows, a single cron line on macOS and Linux. It pins the folder you ran it in — run it somewhere else to watch that instead.
npx mandeun-cli schedule off removes it. The line is tagged, so it comes out cleanly.

~/output

$ npx mandeun-cli

3 things you are missing

  api-server  .env is tracked by git
      6d ago "add rate limit"

  landing-page  12 uncommitted files, untouched 21d
      21d ago "rewrite hero copy"
      left mid-edit: src/hero.tsx, styles.css, +10 more

  side-bot  untouched for 47d

all 8

  side-bot         47d ago   0 dirty  1br
  landing-page     21d ago  12 dirty  2br
  api-server        6d ago   2 dirty  3br
  ...

The two lines under each finding answer “what was I doing here?” — the last commit and the files you left half-edited. That is what lets you reopen it.

~/privacy

✓It never reads a line of your code. Only file names. There is no code in it that opens a file.
✓Nothing leaves unless you run send. Plain runs make no network calls at all. Unplug the internet and it behaves the same.
✓No account, no login. It never asks for your email.
✕File contents · paths · commit messages · working-tree filenames These four never leave, under any setting. Even a secret-file hit sends only the basename — shipping apps/acme-client/.env would itself be the leak.
npx mandeun-cli payload prints everything that could ever be sent, so you can read it yourself.

~/why-a-script

What you download is a one-page shell script. Open it in any text editor — it is a dozen lines, and all it does is type npx mandeun-cli for you.

There is no .exe or .dmg for one reason. An unsigned binary asking to read every project folder you own is indistinguishable from malware. What this tool sells is “nothing leaks”, and that promise only holds if you can see inside. So it only ships things you can open.