sandworm-audit VS Damn-Vulnerable-GraphQL-Application

use https://github.com/sandworm-hq/sandworm-audit. if u run it for your app the deprecated libraries will show up in the list of issues found (contributor)

And as you add more dependencies, it’s time to also build security and compliance into your app early. Sandworm Audit is the open-source npm audit that doesn’t suck: it checks for multiple types of issues, like vulnerabilities or license compliance, it outputs SVG charts and CSVs, and you can also run it in your CI to enforce security rules. Check the docs and npx @sandworm/audit in your JavaScript app’s root to try it out 🪱.

This is why we've created Sinkchart - beautiful Visualizations For Your App's Dependencies

made with https://github.com/sandworm-hq/sinkchart

It's not exactly a tool, but Damn Vulnerable GraphQL Application is pretty useful: https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application

Usually in these when I write about some library or app I try to highlight its strengths. Well this time I’m going to do the complete opposite and talk about weaknesses. Rest assured it won't be some scorching review, because we’re looking at Damn Vulnerable GraphQL Application where weaknesses are completely intentional and exploiting them is the whole point.