Paste a Dockerfile on the left to see its stages, layers, and best-practice checks on the right. Pick a preset or paste your own.
Dockerfile
read-onlyStage 1
FROM node:latestlatestfinalWORKDIR
/app
metadataCOPY
. .
layerRUN
npm install
layerEXPOSE
3000
metadataCMD
npm start
metadataBest Practices
2 warnings2 hintsStage 1 uses "node:latest" without a pinned tag. Pin a specific version for reproducible builds.
Copying all files before installing dependencies busts the cache on every code change. Copy dependency manifests first, install, then copy the rest.
L4No USER instruction in the final stage. The container will run as root by default.
No HEALTHCHECK in the final stage. Adding one helps orchestrators detect unhealthy containers.