This repo includes many security mistakes that should be discovered by SAST tools.
package-lock.json
includes Node packages with known vulnerabilitiesGemfile.lock
includes dependencies that are listed as insecure in the ruby-advisory-dbindex.js
includes code meant to trigger the SonarJS vulnerability rules