← Browse the report library

a public repository, read by nittim

Is snoopysecurity/dvws-node production ready?

What nittim read in this repository, and what it found. Public repository, public reading — sourced from its own code and dependency manifests, nothing else.

Damn Vulnerable Web Services — broken APIs, by design.

JavaScript · 515 stars

No verdict. The rule-based check reports hard evidence, or reports that it found none. Neither is a judgment on whether this code is safe to ship.

What was read — rule-based scan

Rule-based checks run on nittim's servers — a secret scanner and a dependency check, no model in the path. The code reached those two and stopped there.

Read 60 of 70 eligible files. Commit a7385b8. 2026-08-21.

What the scanners found

Committed secrets on production paths
0
Vulnerable runtime dependencies
30

@xmldom/xmldom (GHSA-2v35-w6hq-6mfw, GHSA-f6ww-3ggp-fr8h, GHSA-j759-j44w-7fr8), angular (GHSA-4w4v-5hc9-xrr2), apollo-server (GHSA-mp6q-xf9x-fwf7), brace-expansion (GHSA-3jxr-9vmj-r5cp, GHSA-mh99-v99m-4gvg), form-data (GHSA-hmw2-7cc7-3qxx), http-proxy-middleware (GHSA-gcq2-9pq2-cxqm), ip (GHSA-2p57-rm9w-gvfp), ip-address (GHSA-mwp4-54f8-5fhr), js-yaml (GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj), libxmljs (GHSA-6433-x5p4-8jc7, GHSA-jv72-59wq-8rxm, GHSA-mg49-jqgw-gcj6), lodash (GHSA-r5fr-rjxr-66jc), minimatch (GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj), mongoose (GHSA-wpg9-53fq-2r8h), node-serialize (GHSA-q4v7-4rhw-9hqm), path-to-regexp (GHSA-37ch-88jc-xwx2), sequelize (GHSA-6457-6jrx-69cr)

Run it yourself

Scan any public repository in seconds — no sign-in, no card. Audit it to have a model read the code. Loop the report into your assistant to get the fixes applied and re-checked.

Scan your own repo

Questions

What did nittim read in snoopysecurity/dvws-node?
nittim read 60 of 70 eligible files in snoopysecurity/dvws-node. The reading ran on August 21, 2026. It was taken at commit a7385b8.
Did nittim find committed secrets or vulnerable dependencies in snoopysecurity/dvws-node?
The rule-based scan found 0 committed secrets and 30 vulnerable dependencies in snoopysecurity/dvws-node. Affected: @xmldom/xmldom (GHSA-2v35-w6hq-6mfw, GHSA-f6ww-3ggp-fr8h, GHSA-j759-j44w-7fr8), angular (GHSA-4w4v-5hc9-xrr2), apollo-server (GHSA-mp6q-xf9x-fwf7), brace-expansion (GHSA-3jxr-9vmj-r5cp, GHSA-mh99-v99m-4gvg), form-data (GHSA-hmw2-7cc7-3qxx), http-proxy-middleware (GHSA-gcq2-9pq2-cxqm), ip (GHSA-2p57-rm9w-gvfp), ip-address (GHSA-mwp4-54f8-5fhr), js-yaml (GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj), libxmljs (GHSA-6433-x5p4-8jc7, GHSA-jv72-59wq-8rxm, GHSA-mg49-jqgw-gcj6), lodash (GHSA-r5fr-rjxr-66jc), minimatch (GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj), mongoose (GHSA-wpg9-53fq-2r8h), node-serialize (GHSA-q4v7-4rhw-9hqm), path-to-regexp (GHSA-37ch-88jc-xwx2), sequelize (GHSA-6457-6jrx-69cr).
Is snoopysecurity/dvws-node production ready?
A free scan is not a verdict. A full audit gives one.

More like this

More JavaScript repositories →

Add the badge to your README
README badge
nittim verdict badge for snoopysecurity/dvws-node[![nittim](https://nittim.com/api/badge/snoopysecurity/dvws-node)](https://nittim.com/library/snoopysecurity/dvws-node)