Loading report…
← nittim
← nittimshared scan
payatu/Tiredful-API ↗ · 0134124 · Aug 21, 2026, 11:11 PM
Hard evidence: 2 issues need attention now.
Free scan · deterministic evidence only
2 critical dependency vulnerabilities found. 11 more dimensions need Audit for the full picture.
84 of 130 files scanned (64%). Nothing was cut short by a limit — the rest is mostly images, generated output, and other non-source content this audit doesn't read.
What this means
Two scanners read 84 of 130 files: one for committed credentials, one for known vulnerabilities in your dependencies. They found 0 committed credentials on production paths and 2 high or critical vulnerabilities in runtime dependencies. These two checks cover a narrow slice of what decides whether software is ready to ship. All 14 dimensions — architecture, privacy, reliability, AI-generated-code risk and the rest — are unexamined here. Deep AI is the tier that issues a verdict. This scan does not.
Read it:
Packages you ship with known vulnerabilities
cvePyPI Django2 in 1 version
1.11.7 — GHSA-337x-4q8g-prc5, GHSA-3gh2-xw74-jmcw
Improper Input Validation in Django — HIGH
SQL injection in Django — HIGH
Worth knowing, not blocking
advisory cvePyPI djangorestframework3 in 1 version
3.7.3 — GHSA-fx83-3ph3-9j2q, GHSA-gw84-84pc-xp82, PYSEC-2020-263
Cross-site Scripting (XSS) in Django REST Framework — MODERATE
Cross-site Scripting in djangorestframework — LOW
A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2. When using the browseable API viewer, Django REST Framework fails to properly escape certain strings that can come f — UNKNOWN
low cvePyPI Django@1.11.7GHSA-2f9x-5v75-3qv4
Django Denial-of-service possibility in truncatechars_html and truncatewords_html template filters — LOW
AI audit · payatu/Tiredful-API · 14 dimensions · usually within 15 minutes*
14 things unaudited
Security, privacy, reliability, AI-generated-code risk, 10 more: unaudited, not clean.
The free scan doesn't reason across these — unaudited, not safe. Opus 4.8 scores each, with evidence, impact, and a fix.
SecurityPriority: Core
Privacy & CompliancePriority: Core
Reliability & ResiliencePriority: Core
Code Quality & ArchitecturePriority: Important
AI / Vibe Coding RiskPriority: Important
Performance & ScalabilityPriority: Important
Infrastructure & DevOpsPriority: Important
Data LayerPriority: Important
Business & Product RiskPriority: Supporting
Developer ExperiencePriority: Supporting
Accessibility & UXPriority: Supporting
ObservabilityPriority: Supporting
Maintainability ForecastPriority: Specialized
IP & Novelty ExposurePriority: Specialized
Modules run (2)
Hardcoded Secret ScanDependency Vulnerability Scan
Scanned 84 of 130 files · payatu/Tiredful-API
Dependency manifests: 1 Python manifest read.
README badge
[](https://nittim.com/library/payatu/Tiredful-API)