Public repos are free, no card needed. Click install, pick a repo, open a PR, and your first SiftPulse review lands inside 60 seconds.
https://github.com/apps/siftpulse/installations/new
We onboarded 40 repos in a week. The retro activation summary told us exactly what SiftPulse would have caught.
— Cascade DB
SQL injection: the email variable is interpolated directly into a SQL query via string concatenation, allowing an attacker to submit a crafted email string and extract or modify any data in the users table. Use parameterized queries: db.query('SELECT * FROM users WHERE email = $1', [email]) or your ORM's findByEmail method. See how src/routes/auth.js handles this on line 34.