2 comments

[ 220 ms ] story [ 429 ms ] thread
We built an open-source tool that scans your codebase and generates OpenAPI docs in minutes. It list all the apis along with sensitive information, auth/public and if its outdated. It picks up routes, params, request bodies, and models directly from the code and outputs a clean OpenAPI spec you can drop into your workflow.
Does it have too many false positives? Is it possible to regulate how picky is the test?