ShipCheck is a native macOS application that helps you check your Xcode projects (iOS/macOS, including React Native) before submitting to the App Store — based on real data taken directly from your App Store Connect account, rather than guessing or just linting static code.

The problem that ShipCheck solves: the majority of times when apps are rejected by the App Store or take longer to review does not come from major errors, but from small "data mismatches" — a product ID changed in the code but forgotten to be updated on App Store Connect, a Required Reason API newly added by a third-party library but not declared in the Privacy Manifest, or an app information field left empty. ShipCheck accurately detects these "silent" errors before you submit, rather than waiting for Apple to reject it to find out.

Main features:

• Check for mismatched IAP/Subscription product IDs between the code and App Store Connect
• Scan the Privacy Manifest and Required Reason API, automatically suggesting missing reason codes
• Thoroughly check App Information & Review details (screenshots, support URL, demo account...) taken directly from ASC
• Cross-check the Age Rating between the actual content in the code and the declaration on ASC
• Check Export Compliance, App Tracking Transparency, Sign in with Apple, Background Modes

Target audience: indie developers and small teams self-publishing iOS/macOS apps to the App Store, those looking to reduce the risk of rejection or wasting time on reviews due to easily forgotten minor errors.

How to get started: just macOS 14 or later. Download the .dmg file, drag it into Applications, open your Xcode project, enter Key ID/Issuer ID/.p8 file from App Store Connect (detailed instructions are provided in the app), and then click Analyze — no account needed, no complex configuration required.

What sets it apart: ShipCheck is not just a static linter that only reads code. It directly calls the App Store Connect API to get real data from your app and then cross-references — so it can also detect errors arising from data mismatches over time, not just syntax errors. Everything runs locally on your machine, with no backend, and the API key never leaves your device.