← Browse the report library

a public repository, read by nittim

Is R44VC0RP/agenda.dev production ready?

What nittim read in this repository, and what it found. Public repository, public reading — sourced from its own code and dependency manifests, nothing else.

A real-time todo app; the README credits v0.dev.

TypeScript · 301 stars

Verdict

Not Safe for Production

Critical issues block production use. Do not ship as-is.

What was read — AI audit

The AI reading sends the selected files to Anthropic's API and reads the answer back. Anthropic deletes inputs and outputs within 30 days and does not use them for training. nittim keeps the report.

Read 166 of 166 eligible files. Commit 1713250. 2026-08-22.

What the scanners found

Committed secrets
0
Vulnerable dependencies
54

What the reading raised

Critical
0
High
3
Medium
5
Low
4
Info
0

Counts only. The issues themselves go to whoever runs the reading.

What was read — rule-based scan

Rule-based checks run on nittim's servers — a secret scanner and a dependency check, no model in the path. The code reached those two and stopped there.

Read 166 of 186 eligible files. Commit 1713250. 2026-08-22.

What the scanners found

Committed secrets on production paths
0
Vulnerable runtime dependencies
30

@auth/core (GHSA-7rqj-j65f-68wh, GHSA-xmf8-cvqr-rfgj), axios (GHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw), brace-expansion (GHSA-3jxr-9vmj-r5cp, GHSA-mh99-v99m-4gvg), defu (GHSA-737v-mqg7-c878), drizzle-orm (GHSA-gpj5-g38j-94v9), form-data (GHSA-fjxv-7rqg-78g4, GHSA-hmw2-7cc7-3qxx), glob (GHSA-5j98-mcp5-4vw2), kysely (GHSA-8cpq-38p9-67gx, GHSA-pv5w-4p9q-p3v2, GHSA-wmrf-hv6w-mr66), lodash (GHSA-r5fr-rjxr-66jc), minimatch (GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj), nanoid (GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8), next (GHSA-267c-6grr-h53f, GHSA-26hh-7cqf-hhc6, GHSA-36qx-fr4f-26g5), next-auth (GHSA-7rqj-j65f-68wh)

Run it yourself

Scan any public repository in seconds — no sign-in, no card. Audit it to have a model read the code. Loop the report into your assistant to get the fixes applied and re-checked.

Scan your own repo

Questions

What did nittim read in R44VC0RP/agenda.dev?
nittim read 166 of 166 eligible files in R44VC0RP/agenda.dev. The reading ran on August 22, 2026. It was taken at commit 1713250.
Did nittim find committed secrets or vulnerable dependencies in R44VC0RP/agenda.dev?
The rule-based scan found 0 committed secrets and 30 vulnerable dependencies in R44VC0RP/agenda.dev. Affected: @auth/core (GHSA-7rqj-j65f-68wh, GHSA-xmf8-cvqr-rfgj), axios (GHSA-35jp-ww65-95wh, GHSA-3g43-6gmg-66jw), brace-expansion (GHSA-3jxr-9vmj-r5cp, GHSA-mh99-v99m-4gvg), defu (GHSA-737v-mqg7-c878), drizzle-orm (GHSA-gpj5-g38j-94v9), form-data (GHSA-fjxv-7rqg-78g4, GHSA-hmw2-7cc7-3qxx), glob (GHSA-5j98-mcp5-4vw2), kysely (GHSA-8cpq-38p9-67gx, GHSA-pv5w-4p9q-p3v2, GHSA-wmrf-hv6w-mr66), lodash (GHSA-r5fr-rjxr-66jc), minimatch (GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj), nanoid (GHSA-28wg-ghj8-5hjv, GHSA-2v37-7h3g-55p8), next (GHSA-267c-6grr-h53f, GHSA-26hh-7cqf-hhc6, GHSA-36qx-fr4f-26g5), next-auth (GHSA-7rqj-j65f-68wh).
Is R44VC0RP/agenda.dev production ready?
nittim's verdict for R44VC0RP/agenda.dev is Not Safe for Production. Critical issues block production use. Do not ship as-is.

More like this

More TypeScript repositories →More repositories with this verdict →

Add the badge to your README
README badge
nittim verdict badge for R44VC0RP/agenda.dev[![nittim](https://nittim.com/api/badge/R44VC0RP/agenda.dev)](https://nittim.com/library/R44VC0RP/agenda.dev)