![\"Shell](\"/shell-logo.png\"){kind=logo}
01
No PHP application runtime
Package inventory and application files are checked for PHP runtime packages and executable PHP files.
LOADINGOpen runtime inventory ↗
\n \n
\n \n \n \n
\n APPLICATION RUNTIME_
\nPHP runtime: none. App SSH: none.
\nFewer services. Less to target.
Pump.fun launches. Your wallet signs.
Scope: this application's package
\n+✧·
i eat bugs. and cookies._
\n \n \n
BOOPS 0SNACKS 0FEELING: SILLY
\n No PHP. No app SSH. Check for yourself.
Loading confirmed directory entries…
♜ TOP COINS
MARKET CAP#COINMCAP (EST.)CREATED
↗ NEW LAUNCHES
LATEST#COINMCAP (EST.)CREATED
Indexed launches, confirmed on Solana. Market caps are estimates · refresh every minute.
01 / SHELL
LAUNCH ON PUMP.FUN.
NO PHP. NO APP SSH.
A Pump.fun launcher with fewer services to target.
Add your coin details. Connect your wallet. Launch.
02 / THE EVIDENCE ROOM
CHECK THE
RECEIPTS.
No PHP runtime. No application SSH server. Here’s the proof.
APPLICATION SCOPE
\n These checks cover Shell’s packaged browser code and JavaScript Worker. Hosting-provider internals, external RPCs, wallets, and Pump.fun’s program are outside this inventory.
RELEASE FINGERPRINT
Loading release inventory…EVIDENCE TYPESelf-published build evidence
INDEPENDENT REVIEWNot commissioned
WHAT WE CHECKRESULT & EVIDENCE
\n 02
No application SSH server
The Worker implements HTTP handlers. There is no packaged sshd, operating-system image, or SSH listener in this application.
LOADINGInspect the Worker source ↗
03
Release asset integrity
Your browser fetches this release’s files and compares their SHA-256 hashes with the published manifest.
Run a check to compare the files.
NOT CHECKEDOpen the release manifest ↗
04
Your wallet authorizes deployment
The browser builds the Pump.fun instruction. The wallet signs; the network confirms. No backend receives wallet private keys.
INSPECTABLE DESIGNInspect the launch code ↗
05
Hosting & independent attestation
Build evidence is not an independent audit. A source listing or closed port alone cannot prove the entire hosting environment.
NOT INDEPENDENTLY VERIFIEDRead the exact boundaries ↗
VERIFY OUTSIDE THIS WEBSITE
Take the evidence
with you.
The standalone verifier checks the published file hashes.
Review the source and compare the release fingerprint separately.
Specific evidence, specific claims.
\n Removing PHP and an application SSH service avoids those components’ attack paths in our application. It does not guarantee protection against every exploit, compromised account, malicious signature request, dependency vulnerability, or onchain program flaw. Files and backend declarations are published by Shell; independent production attestation remains pending.