All 36 Dependencies
Every package web-check depends on, ranked by repo health score.
Web-Check is an open-source OSINT platform that gives security professionals, sysadmins, and developers deep technical visibility into any website. Instead of switching between a dozen command-line tools, Web-Check aggregates over 30 distinct data sources — from IP geolocation and SSL certificate chains to DNS DNSSEC validation, HTTP security headers, open ports, tech stack fingerprinting, and carbon footprint estimation — into a single, interactive dashboard.
The architecture separates a Node.js/Express backend of self-registering API modules from a React + Astro frontend. Each API module is an independent JavaScript file that is auto-discovered and mounted at runtime, so adding a new data source is as simple as dropping a new file into the api/ directory. The client side drives all 30+ jobs concurrently, streaming results into card components as they arrive, with per-job retry and per-job abort capabilities.
Web-Check is designed for genuine self-hosting. A single Docker image bundles the Express API server, the Astro SSR layer, and a Chromium binary for screenshot capture. The same codebase deploys equally well to Netlify or Vercel as serverless functions, making it practical for both personal lab use and organizational deployment at scale. Configurable rate limiting, CORS controls, and environment-variable-driven feature flags mean operators can tailor it for public or private use.
Beyond passive reconnaissance, Web-Check includes an advisory engine: a set of pure analyzer functions that evaluate fetched data against security best practices and surface findings categorized as critical, issue, warning, or pass. This transforms raw data collection into actionable intelligence, letting users know not just what a site exposes but whether those exposures represent risks.
