Show HN: Open-source tool to list sensitive, unauth & outdated APIs from code
github.com
1 thread
We built an open-source tool that scans your codebase and generates OpenAPI docs in minutes. It list all the apis along with sensitive information, auth/public and if its outdated. It picks up routes, params, request bodies, and models directly from the code and outputs a clean OpenAPI spec you can drop into your workflow.
Does it have too many false positives? Is it possible to regulate how picky is the test?