a public repository, read by nittim
Is alchaincyf/fanbox production ready?
What nittim read in this repository, and what it found. Public repository, public reading — sourced from its own code and dependency manifests, nothing else.
vibe coding 的驾驶舱：左边文件，右边/下边终端，中间看清每一次改动。 / The cockpit for vibe coding: browse files on the left, command agents on the right, watch every change in between.
JavaScript · 1k stars · last push October 12, 2026
alchaincyf/fanbox is a JavaScript repository that provides an interface for vibe coding, featuring a file browser on the left side, command agents on the right, and a central view for tracking changes during development.
The scan read all 78 files in the repository and found evidence of vulnerable runtime dependencies. There are 3 vulnerable runtime dependencies present. The package js-yaml has three known vulnerabilities: GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, and GHSA-5p4m-2wfm-xmqj.
To address these findings, update the vulnerable dependencies in alchaincyf/fanbox and rescan to confirm the issues are resolved. Then run a full audit to understand each vulnerability and determine what action each one requires for your use case.
Written from nittim's own scan on October 14, 2026; rescanned when the repository changes.
No verdict. The rule-based check reports hard evidence, or reports that it found none. Neither is a judgment on whether this code is safe to ship.
What was read — rule-based scan
Rule-based checks run on nittim's servers — a secret scanner and a dependency check, no model in the path. The code reached those two and stopped there.
Read 78 of 78 eligible files. Commit e8395cb. 2026-10-14.
What the scanners found
- Committed secrets on production paths
- 0
- Vulnerable runtime dependencies
- 3
js-yaml (GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj)
Run it yourself
Scan any public repository in seconds — no sign-in, no card. Audit it to have a model read the code. Loop the report into your assistant to get the fixes applied and re-checked.
Scan your own repoQuestions
- What did nittim read in alchaincyf/fanbox?
- nittim read 78 of 78 eligible files in alchaincyf/fanbox. The reading ran on October 14, 2026. It was taken at commit e8395cb.
- Did nittim find committed secrets or vulnerable dependencies in alchaincyf/fanbox?
- The rule-based scan found 0 committed secrets and 3 vulnerable dependencies in alchaincyf/fanbox. Affected: js-yaml (GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj).
- Is alchaincyf/fanbox production ready?
- A free scan is not a verdict. A full audit gives one.
More like this
More JavaScript repositories →
Add the badge to your README
[](https://nittim.com/library/alchaincyf/fanbox)