payload-doctor

Static security & correctness linter for Payload CMS. Zero-config, deterministic, ts-morph-based. Catches access-control gaps, unsafe Local API usage & richtext render risks. npx-runnable. Maintained by metakraft on GitHub, where it has earned 15 stars from the community.

It's actively developed around cli, code-quality, devtools, and is a solid reference for anyone building with these tools.