Sign in Get started freeSign up

Architecture check

Which endpoints reach your data without authenticating?

Paste a public GitHub repository. Wyro reads its routes and data models and shows every path from an endpoint to a table that skips a guard.

Public repositories. No install, nothing stored. Findings open with a free account.

Try onehagopj13/node-express-boilerplateExpress + Mongoose fastapi/full-stack-fastapi-templateFastAPI + SQLModel

Backends checked

111

Popular public repositories

Routes read

4,427

1,084 tables behind them

Findings

2,800

221 errors2,579 warnings

With an error

28/111

Backends with at least one

Already checked

111 popular backends, most-starred first. Open one to see its report.

fastapi/sqlmodelFastAPI1075 findings ghostfolio/ghostfolioNestJS118194 findings hagopj13/node-express-boilerplateExpress13221 findings kanbn/kanNext.js1625 findings sadmann7/skateshopNext.js361674 findings brocoders/nestjs-boilerplateNestJS19521 findings crafter-station/petdexNext.js672433 findings lujakob/nestjs-realworld-example-appNestJS2151 finding Soju06/codex-lbFastAPI18868109 findings jmcdo29/testing-nestjsNestJS22324 findings

Show all 111

kunalkapadia/express-mongoose-es6-rest-apiExpress8113 findings shen100/miliNestJS652581 findings ljlm0402/typescript-express-starterExpress817 findings Buuntu/fastapi-reactFastAPI1015 findings fastapi-practices/fastapi-best-architectureFastAPI1221991 findings danielfsousa/express-rest-boilerplateExpress15313 findings buqiyuan/nest-adminNestJS931511 findings benavlabs/FastAPI-boilerplateFastAPI351014 findings genalhuang/genal-chatNestJS176No findings zws-im/zwsNext.js8310 findings diegohaz/restExpress1117 findings reliverse/relivatorNext.js583 findings pvarentsov/typescript-clean-architectureNestJS1533 findings liaogx/fastapi-tutorialFastAPI45334 findings nextacular/nextacularNext.js23822 findings chnirt/nestjs-graphql-best-practiceNestJS31720 findings CatsMiaow/nestjs-project-structureNestJS2223 findings vargasjona/fastapi-alembic-sqlmodel-asyncFastAPI551029 findings maitraysuthar/rest-api-nodejs-mongodbExpress9215 findings taozhi1010/nest-adminNestJS129233 findings kuangshp/nestjs-mysql-apiNestJS55812 findings nelsonlaidev/nelsonlai.devNext.js91115 findings panaverse/learn-nextjsNext.js23627 findings VincentJouanne/nest-clean-architectureNestJS424 findings invoicerr-app/invoicerrNestJS2235523 findings andrechristikan/ack-nestjs-boilerplateNestJS197261 finding 87789771/meimei-nestjs-adminExpress150309 findings Saas-Starter-Kit/Saas-Kit-prismaNext.js14611 findings wenqiyun/nest-adminNestJS36112 findings jackblatch/OneStopShopNext.js21621 findings Saluki/nestjs-templateNestJS31No findings rafsaf/minimal-fastapi-postgres-templateFastAPI821 finding kelvin-mai/nest-ideas-apiNestJS21321 findings grillazz/fastapi-sqlalchemy-asyncpgFastAPI19926 findings Shyam-Chen/Express-StarterExpress32334 findings gaganpreet/fastapi-starterFastAPI721 finding josephgoksu/prime-nestjsNestJS1126 findings operational-co/operational.coExpress551729 findings ahmetuysal/nest-hackathon-starterNestJS14412 findings koldakov/futuramaapiFastAPI451139 findings lupu60/nestjs-toolboxNestJS1236 findings tkosminov/nestjs-exampleNestJS7513 findings haixiangyan/nest-todoNestJS172No findings mikemajesty/nestjs-microservice-boilerplate-apiNestJS36546 findings baiwumm/vue3-adminNestJS51107 findings zexahq/better-auth-starterNext.js342 findings rajput-hemant/infinitunesNext.js43336 findings vanxh/openbioNext.js1285 findings talkpython/web-applications-with-fastapi-courseFastAPI9312 findings andregardi/jwt-express-typeormExpress712 findings warriorBrian/nuxt-blogNestJS771138 findings antonio-lazaro/prisma-express-typescript-boilerplateExpress1327 findings vndevteam/nestjs-boilerplateNestJS1837 findings meysamhadeli/booking-microservices-nestjsNestJS1188 findings tropicoo/yt-dlp-botFastAPI818 findings anilahir/nestjs-authentication-and-authorizationNestJS515 findings c0sogi/LLMChatFastAPI28321 findings anthonycorletti/cloudrun-fastapiFastAPI1424 findings gnuboard/g6FastAPI2961188 findings LuisLuii/FastAPIQuickCRUDFastAPI36666 findings ManiMozaffar/linkedIn-scraperFastAPI26316 findings chnirt/nestjs-restful-best-practiceNestJS41842 findings Louis3797/express-ts-auth-serviceExpress9531 findings yezz123/ai-templateFastAPI521010 findings SAP-samples/cap-sflightSAP CAP141316 findings seapagan/fastapi-templateFastAPI2728 findings amosbastian/templateNext.js1488 findings adisreyaj/compitoNestJS461218 findings rawheel/fastapi-boilerplateFastAPI512 findings zclzone/isme-nest-serveNestJS3842 findings MarcosCamara01/ecommerce-templateNext.js2546 findings SashenJayathilaka/Project-Management-AppExpress24840 findings customermates/customermatesNestJS26165170 findings ghostlexly/ultimate-expressjs-starter-kitExpress665 findings scionoftech/FastAPI-Full-Stack-SamplesFastAPI23412 findings modern-python/fastapi-sqlalchemy-templateFastAPI825 findings DimiMikadze/festNestJS14411 findings lifefloating/nestjs-project-templateNestJS17221 findings prisma/blog-backend-rest-api-nestjs-prismaNestJS718 findings HaiderMalik12/nestjs-fundamentalsNestJS581578 findings gothinkster/node-express-prisma-v1-official-appExpress21416 findings SAP-samples/cloud-cap-samples-javaSAP CAP383643 findings Carole007/carole-adminNestJS1101615 findings TomDoesTech/Testing-Express-REST-APIExpress837 findings SAP-samples/btp-cap-genai-ragSAP CAP1121 finding SAP-samples/ui5-cap-event-appSAP CAP522 findings SAP-samples/cloud-cap-hana-swapiSAP CAP18023303 findings SAP-samples/fiori-elements-v4-cap-advancedSAP CAP171520 findings SAP-samples/cap-hana-exercises-codejamSAP CAP122No findings SAP-samples/cap-service-integration-codejamSAP CAP12615 findings SAP-samples/codejam-cap-llmSAP CAP1228 findings SAP-samples/cap-bookshop-wdi5SAP CAP9317 findings SAP-samples/cloud-cap-with-javascript-basicsSAP CAP89383 findings SAP-samples/btp-cap-genai-semantic-searchSAP CAP101No findings SAP-samples/btp-cap-dox-invoice-validationSAP CAP58139 findings SAP-samples/xsa-cap-migrationSAP CAP158583 findings SAP-samples/cap-tour-hands-onSAP CAP13312 findings SAP-samples/xsa-cap-migration-using-basextnSAP CAP7673151 findings SAP-samples/recap2026-cap-level-data-federationSAP CAP311129 findings SAP-samples/recap2026-latest-and-greatest-cap-featuresSAP CAP131417 findings SAP-samples/event-hub-cap-samplesSAP CAP414 findings

What comes back

Not a score and not a summary. Every finding is an endpoint, the table it reaches, the path between them, and the rule it breaks — so you can open the file and check the claim yourself.

The engine is rule-based, so the same commit always produces the same verdict. If a repository is in a language or framework it cannot read, it says that instead of reporting a pass.

TypeScript: Express, Fastify, Hono, NestJS, Next.js App Router
Python: FastAPI
Schemas: Prisma, Drizzle, TypeORM, Mongoose

Run it where the code is

Browser extension

This check on every GitHub repository you open, including private ones, which never leave your machine.

Chrome Web Store Download the build

Command line

npx wyro-check .

Same engine, same verdicts, reading your working tree. Exits non-zero on an error so CI can fail on it.