Lints checkout/payment HTML for PCI DSS v4.0.1 Req 6.4.3 and 11.6.1: unpinned third-party scripts, missing SRI, weak CSP, session-replay, card fields in page scope. Runs entirely in your browser — nothing is uploaded.
Free here: Audit the payment page you have open and get every PCI DSS v4.0.1 script-integrity finding with line numbers and the requirement it maps to.. In the editor: Audit every payment page in the repository at once and export the dated script inventory and justification evidence file you hand to your QSA or attach to SAQ A-EP. — that part asks for a licence key.
Same engine as the VS Code extension, byte for byte.