Shadowaudit CLI catches undocumented Express.js routes before production

Shadowaudit is a new CLI tool that statically scans Express.js codebases for undocumented or unauthenticated routes, comparing them against OpenAPI specs. It can fail CI pipelines on critical findings, preventing shadow APIs from reaching production. The tool supports configurable severity levels and outputs in table, JSON, or SARIF formats.