Docs
How it'sbuilt & secured.
Plain-English documentation for the tools behind this site. It explains how each control works. It never includes keys, tokens or account details.
Git & GitHub
How the code is stored, versioned and protected, and how every change becomes the public changelog.
GitHub Actions
The automated checks that run on every change and every hour, and how the workflows themselves are locked down.
CodeQL (SAST)
Static application security testing that reads the code and flags security bugs before they ship.
Dependabot
Automatic alerts and update pull requests for the third-party code the site depends on.
REST API & Postman
A small public read-only API, its endpoints, and the Postman collection that tests it every hour.
OWASP Top 10
How this site and its API map to the OWASP Top 10 web application security risks (2025 edition).