sandworm-jest VS Damn-Vulnerable-GraphQL-Application

Yes, you can use it for security by locking down which dependencies can execute which methods in your app. But you can also use it for auditing and documenting your app's supply chain security profile, then snapshot testing against that using the Jest and Mocha plugins.

It's not exactly a tool, but Damn Vulnerable GraphQL Application is pretty useful: https://github.com/dolevf/Damn-Vulnerable-GraphQL-Application

Usually in these when I write about some library or app I try to highlight its strengths. Well this time I’m going to do the complete opposite and talk about weaknesses. Rest assured it won't be some scorching review, because we’re looking at Damn Vulnerable GraphQL Application where weaknesses are completely intentional and exploiting them is the whole point.