a public repository, read by nittim
Is appsecco/dvna production ready?
What nittim read in this repository, and what it found. Public repository, public reading — sourced from its own code and dependency manifests, nothing else.
Damn Vulnerable NodeJS Application — the Top 10, on purpose.
SCSS · 778 stars
No verdict. The rule-based check reports hard evidence, or reports that it found none. Neither is a judgment on whether this code is safe to ship.
What was read — rule-based scan
Rule-based checks run on nittim's servers — a secret scanner and a dependency check, no model in the path. The code reached those two and stopped there.
Read 41 of 151 eligible files. Commit 9ba473a. 2026-08-21.
What the scanners found
- Committed secrets on production paths
- 0
- Vulnerable runtime dependencies
- 14
ejs (GHSA-phwq-j96m-2c2q), express-fileupload (GHSA-9wcg-jrwf-8gg7, GHSA-w4m6-x6c2-j5c9), libxmljs (GHSA-6433-x5p4-8jc7, GHSA-773h-w45w-f2f9, GHSA-jv72-59wq-8rxm), mathjs (GHSA-pv8x-p9hq-j328, GHSA-vx5c-87qx-cv6c, GHSA-x2fc-mxcx-w4mf), morgan (GHSA-gwg9-rgvj-4h5j), mysql2 (GHSA-4rch-2fh8-94vw, GHSA-fpw7-j2hg-69v5), node-serialize (GHSA-q4v7-4rhw-9hqm), sequelize (GHSA-f598-mfpv-gmfx)
Run it yourself
Scan any public repository in seconds — no sign-in, no card. Audit it to have a model read the code. Loop the report into your assistant to get the fixes applied and re-checked.
Scan your own repoQuestions
- What did nittim read in appsecco/dvna?
- nittim read 41 of 151 eligible files in appsecco/dvna. The reading ran on August 21, 2026. It was taken at commit 9ba473a.
- Did nittim find committed secrets or vulnerable dependencies in appsecco/dvna?
- The rule-based scan found 0 committed secrets and 14 vulnerable dependencies in appsecco/dvna. Affected: ejs (GHSA-phwq-j96m-2c2q), express-fileupload (GHSA-9wcg-jrwf-8gg7, GHSA-w4m6-x6c2-j5c9), libxmljs (GHSA-6433-x5p4-8jc7, GHSA-773h-w45w-f2f9, GHSA-jv72-59wq-8rxm), mathjs (GHSA-pv8x-p9hq-j328, GHSA-vx5c-87qx-cv6c, GHSA-x2fc-mxcx-w4mf), morgan (GHSA-gwg9-rgvj-4h5j), mysql2 (GHSA-4rch-2fh8-94vw, GHSA-fpw7-j2hg-69v5), node-serialize (GHSA-q4v7-4rhw-9hqm), sequelize (GHSA-f598-mfpv-gmfx).
- Is appsecco/dvna production ready?
- A free scan is not a verdict. A full audit gives one.
Add the badge to your README
[](https://nittim.com/library/appsecco/dvna)