devys — ship on devys (developer guide)

Two checks. Zero broken apps.

When you upload, devys runs both of these before your app can go live. Pass → it's listed instantly. Fail → you get the exact reason, so you fix it and re-submit.

Check 1 · Safe

The security scan

A deep scan of every file — it unpacks archives layer by layer and blocks anything dangerous.

No executables, installers or system scripts
No droppers, miners or wallet/crypto code
No hidden or disguised files
Family-friendly, digital-only

Check 2 · Works

The functional check

Confirms your upload is a complete, runnable app — not a broken folder with missing pieces.

Has a real entry point (index.html)
Every file it references is actually included
No dead links to missing assets
Runs on its own — no server or CDN required

Pass both and you're live. That's the whole bar.

Test it before you list it

Drop your .zip (or a single .html) and we'll run the real security + completeness checks right here — no account needed. The final run-test happens when you upload to a listing.

Drop your app hereor click to choose a .zip / .html

↓ or start from our template (a store-ready .zip)

The checklist

Six things. Tick them all and your app sails through.

Store-ready in 6 steps

This is what the automatic checks look for.

One self-contained folder with an index.html at its rootIt should run by double-clicking index.html — no build step, no install.

Include every file it referencesScripts, styles, images, fonts — all in the folder. When in doubt, inline your CSS & JS into index.html.

Works fully offlineNo calls to a backend, API, or external CDN. If you use a library, bundle a local copy — don't <script src="https://…">.

100% client-sideNo .exe/.dmg/.sh, no installers, nothing that touches the user's files or system.

Family-friendly & digital-onlyNo adult content, no physical/shippable goods.

A short README.txtOne line on what it does, one line on how to run it.

The shortcut: let your AI package it

Vibe-coded it with an AI? Paste this prompt with your app and it'll hand you a folder that passes both checks. Copy it, drop your code in at the bottom, done.

store-ready.prompt

# Paste this into your AI (Claude, ChatGPT, Cursor…) along with your app.

You are packaging a web app to sell on the devys marketplace.
It must pass TWO automated checks or it can't be listed:
  • SAFE  — a deep security scan: no executables, installers, obfuscated
           code, trackers, or crypto/wallet code, and nothing that touches
           the user's files or system.
  • WORKS — a functional check that opens the app and confirms it actually
           runs, with every file it needs included.

Package my app so it passes 100%. Follow these rules exactly:

1. Ship ONE self-contained folder with an `index.html` at its root that
   runs by double-clicking it — no build step, no install, no server.
2. Include EVERY file the app references (JS, CSS, images, fonts). Nothing
   missing, no broken links. When in doubt, INLINE the CSS and JS into
   index.html.
3. Work fully OFFLINE. No calls to a backend, API, or external CDN. If you
   use a library, bundle a local copy — never <script src="https://…">.
4. 100% client-side. No executables (.exe/.dmg/.sh), no installers, and no
   code that reads or writes the user's files.
5. Family-friendly and digital-only. No adult content.
6. Add a short `README.txt`: what it does + "open index.html in a browser".

Then output the final file tree and the full contents of every file,
ready for me to zip and upload.

Here is my app:
[paste your code, or describe what you want it to do]

What happens when you upload

You drop the zip

Attach your app folder to a listing in the app and hit publish.

Both checks run

Security + functional, in seconds. We open it, resolve every asset, and confirm it runs.

Live — or a clear fix

Pass and it's listed. Fail and you get the exact reason, e.g. index.html references app.js but that file isn't in the package.