> Existing demo apps which a new user might deploy and uses the SDK > won't work.
Should we think about client side tooling to help? For js functions and zip files we can scan for occurrence of require(openwhisk) for example and generate a warning if the annotation is missing. This can lead to false positives when done with just a regex match but likely good enough. And of course it won’t capture all use cases where the api key is needed or work for all runtimes. -r
