Overview (Preview: sample data)
Health score
Mostly healthy82/100
Higher is safer. From the last check.
Findings by severity
Fix now
2
Fix this week
3
Nice to have
4
Passed
31
Waiting for your approval
1Fix this weekpackage.json
Update a package to its safe version
- "jsonwebtoken": "8.5.1"
+ "jsonwebtoken": "9.0.2"
Check history by app
One square for each daily check.web28/30
api42/42
auth13/14
workers9/9
Fewer findingsMore
Where findings come from
- Leaked keys3
- Open databases2
- Pages without a lock2
- Known security holes2
Findings over time
Fix nowFix this weekNice to havePassedAgent log
- 09:12Checked my-shop.app
- 09:13Found a new security hole in a package
- 09:14Prepared a fix as a draft change
- 09:14Waiting for your approval before changing anything
Open findings
6| Finding | App | Urgency | Found |
|---|---|---|---|
| Anyone can read your customers' emails | web | Fix now | Today |
| Keys and passwords anyone can copy from your code. | api | Fix now | Today |
| The admin page opens without signing in | auth | Fix this week | Yesterday |
| Update a package to its safe version | workers | Fix this week | This week |
| Add-ons your AI invented, or a lookalike of a real one. | web | Fix this week | This week |
| Shared links show no title or picture | web | Nice to have | This week |
Rules
.yof.ymlFrom .yof.yml in your project
RelaxedComments only. Never blocks a merge.
BalancedWarns, and blocks what is dangerous.In use
StrictBlocks anything risky until it is fixed.