Security report: tiangolo/fastapi

Scanned by VibeSafe on 2026-04-19 — SAST, secret detection, and WCAG 2.1 accessibility audit.

B
80/100
0 critical · 0 high · 5 medium · 0 low

No critical or high severity issues — this repo passes VibeSafe's safety gate.

Stack: css, javascript, python · Detected frameworks: fastapi, flask. 24 secrets flagged (path/entropy-adjusted — docs, test fixtures, and non-code artifacts downgraded).

Top finding patterns

What VibeSafe checks

This scan runs Semgrep OSS rules plus custom rules tuned for AI-generated code patterns. It flags hardcoded secrets (AWS, OpenAI, GitHub tokens, JWTs), SQL injection, eval/exec, path traversal, missing security headers, and WCAG 2.1 Level A accessibility gaps.

Scan your own repo

Paste your GitHub URL → Free. 30 seconds. No signup. Results include findings with file:line and a copy-pasteable fix prompt for Cursor / Claude.

Is your AI-built app safe?

Paste your GitHub repo URL. Find out in 30 seconds.
Free. No signup. No install.

Public GitHub repos only. Your code stays on our server only during the scan.

See how other AI-built apps scored →