Skip to content
naqqad

What we cover

Which stacks we scan, and how completely

We say plainly how far we get on each stack. A stack is called fully supported only once it passes our coverage bar; until then it sits in one of the other two groups.

Fully supported

0 stacks

No stack has passed our coverage bar yet. We would rather say so than round up.

Scanned, still being completed

13 stacks

We scan these stacks and report real findings, but they do not yet meet our full coverage bar. A clean report here is not a clean bill of health.

  • Supabase
  • JavaScript and TypeScript
  • Firebase
  • Stripe
  • WordPress
  • Ruby on Rails
  • PHP (Laravel, Symfony)
  • React Native or Flutter
  • React Native and Expo
  • Flutter
  • Python (Django, FastAPI, Flask)
  • C# and ASP.NET Core
  • Go (net/http, Gin, Echo, Fiber, Chi, Gorilla)

Detected, not yet analysed

2 stacks

We recognise these stacks when we see them, but we do not analyse them yet. Nothing in a report should be read as a check of them.

  • Convex
  • Java and Kotlin (Spring Boot)