Repositories list

• repo-with-special-chars

  Public
  1•0•0•21•Updated Aug 27, 2025Aug 27, 2025

• yarn-projects

  Public
  Collection of yarn projects

  7•0•0•198•Updated Aug 23, 2025Aug 23, 2025

• maven-with-vulns

  Public
  14•0•0•651•Updated Aug 22, 2025Aug 22, 2025

• snyk-goof

  Public
  JavaScript

  •373•23•0•162•Updated Aug 20, 2025Aug 20, 2025

• maven-dependency-management

  Public
  3•0•0•489•Updated Aug 15, 2025Aug 15, 2025

• ruby-with-versions

  Public
  Projects with ruby specified in the Gemfile

  Ruby

  •2•0•0•51•Updated Aug 15, 2025Aug 15, 2025

• ruby-app-rails-3

  Public
  Ruby

  •4•0•0•57•Updated Aug 15, 2025Aug 15, 2025

• yarn-workspace-octan-lite

  Public
  7•0•0•202•Updated Aug 15, 2025Aug 15, 2025

• rubygems-alphagov-static

  Public
  GOV.UK static files and resources

  JavaScript

  •

  MIT License

  •48•0•0•51•Updated Aug 14, 2025Aug 14, 2025

• maven-pom-hoisted-transitive

  Public
  2•0•0•260•Updated Aug 9, 2025Aug 9, 2025

• goof

  Public
  Super vulnerable todo list application

  JavaScript

  •3.3k•0•0•189•Updated Aug 4, 2025Aug 4, 2025

• yarn-plug-n-play-goof

  Public
  Testing fixture for yarn plug'n' play feature

  JavaScript

  •2•0•0•71•Updated Jul 26, 2025Jul 26, 2025

• yarn-2-goof

  Public
  JavaScript

  •8•0•0•14•Updated Jul 25, 2025Jul 25, 2025

• npm-lockfiles

  Public
  Various package-lock.json based npm projects

  11•0•0•5.9k•Updated Jul 25, 2025Jul 25, 2025

• mono-repo

  Public
  A mono-repo

  Java

  •24•0•0•101•Updated Jul 23, 2025Jul 23, 2025

• pip-project-optional-deps

  Public
  A pip project with optional dependencies for specific features

  Dockerfile

  •0•0•0•3•Updated Jul 22, 2025Jul 22, 2025

• js-nested-manifest

  Public
  A repo with a manifest file that is not at the root

  30•1•0•2.2k•Updated Jul 22, 2025Jul 22, 2025

• npm-missing-deps

  Public
  1•0•0•35•Updated Jul 21, 2025Jul 21, 2025

• npm-two-vuln-deps

  Public
  6•0•0•20•Updated Jul 21, 2025Jul 21, 2025

• npm-with-dev-dependencies

  Public
  2•0•0•26•Updated Jul 21, 2025Jul 21, 2025

• java-analysis-tinytests

  Public
  Java fixture repo for analysis tests.

  Java

  •2•0•0•1•Updated Jul 18, 2025Jul 18, 2025

• js-npm-private-dep

  Public
  2•0•0•25•Updated Jul 18, 2025Jul 18, 2025

• python-fix-examples

  Public
  6•0•0•104•Updated Jul 14, 2025Jul 14, 2025

• js-without-package-lock

  Public
  4•0•0•609•Updated Jul 6, 2025Jul 6, 2025

• goof-pnpm-locked

  Public
  Super vulnerable todo list application

  JavaScript

  •3.3k•0•0•0•Updated Jun 25, 2025Jun 25, 2025

• objective-c-vuln-examples

  Public
  This repo contains examples of some common Objective C related security vulnerabilities

  C++

  •

  Other

  •1•0•0•0•Updated Jun 23, 2025Jun 23, 2025

• python-pip-app-with-vulns

  Public
  Simple pip based Python app with some vulns

  19•1•0•45•Updated Jun 6, 2025Jun 6, 2025

• ruby-legacy-test-project

  Public
  Ruby

  •20•0•0•28•Updated Jun 4, 2025Jun 4, 2025

• go-dep-project

  Public
  A ruleset based watchguard to keep spot instance based clusters safe, with plugins for VMs, Kubernetes, Prometheus and Pipeline

  Go

  •

  Apache License 2.0

  •22•0•0•61•Updated Jun 4, 2025Jun 4, 2025

• rubygems-with-vulns-and-lock

  Public
  Ruby

  •14•0•0•78•Updated Jun 4, 2025Jun 4, 2025