Public audits

We ran a deep audit on the starters that 0k+ stars worth of vibe-coded apps are built on.

Same pipeline every paying customer gets: the whole repo (up to ~280K tokens of source) read at high effort by Claude Fable 5.1. Every finding cites a file and line and ships with a paste-ready fix prompt. If your app started from one of these, you probably inherited some of what's below. The critical findings were reported to the maintainers before this page went public.

These reports are AI-generated reviews of public open-source code, published to help the people who build on these starters. Findings may include false positives and are not a substitute for a professional security assessment. Maintainers: if you'd like a report removed or corrected, email dlagywns9992@gmail.com.