Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport — counts 0 tools · 0 res
· 0 prompts
permission surface via code analysis
no tools enumerated yet for this server.
evidence-backed
findings quoted directly from the published source artifact — not inferred
secrets 1
- secrets MyBlockcities-goose-ca0d4bb/src/backend/config/config.js :15
password: process.env.DB_PASSWORD,
database 5
- db MyBlockcities-goose-ca0d4bb/src/backend/models/Order.js :1
const { Pool } = require('pg'); - db MyBlockcities-goose-ca0d4bb/src/backend/models/Trade.js :1
const { Pool } = require('pg'); - db MyBlockcities-goose-ca0d4bb/src/backend/models/Transaction.js :1
const { Pool } = require('pg'); - db MyBlockcities-goose-ca0d4bb/src/backend/models/User.js :1
const { Pool } = require('pg'); - db MyBlockcities-goose-ca0d4bb/src/backend/models/Wallet.js :1
const { Pool } = require('pg');
declared dependencies 20
- bcryptjs@^2.4.3
- cors@^2.8.5
- dotenv@^16.3.1
- express@^4.18.2
- express-rate-limit@^7.1.5
- express-validator@^7.0.1
- helmet@^7.1.0
- jsonwebtoken@^9.0.2
- morgan@^1.10.0
- passport@^0.7.0
- passport-jwt@^4.0.1
- passport-local@^1.0.0
- pg@^8.11.3
- redis@^4.6.12
- socket.io@^4.7.2
- winston@^3.11.0
- eslint@^8.56.0
- jest@^29.7.0
- nodemon@^3.0.2
- supertest@^6.3.3