iCarossio

Hey HN!

I have a lot of questions about how to sanitise and validate GraphQL input so I decided to write a blog post about it with the different techniques :)

Best, Antoine

Hey HN! I wrote this article will help you make an informed decision.

Feel free to debate and give your point of view ;)

Yeah you're absolutely right! We couldn't add tags/categories easily for the first version but we are working on it for the future. Thanks for your feedback :)

Hey, thanks for your feedback. As mentioned, we had to scale up our infra a little due to an unexpected load. It's fixed now ;)

Hey, thanks for your feedback. Due to an unexpected load, we had to scale up our infra a little. It's fixed now ;)

For this first version, we assumed you know the API you want to use and want to get some extra info.

The next step could be adding tags/categories so you can look for specific APIs ;)

Hey coauthor here!

Thanks for your feedback! APIRank is new, and we are eager to make it better.

Please note APIRank we are only compatible with Swagger & OpenAPI specifications. You can propose to index any API you want here: https://apirank.dev/submit

Concerning Github APIs, indeed, we missed it. We will add the following in our next update: https://raw.githubusercontent.com/github/rest-api-descriptio...

Hey coauthor here.

Thanks for your feedback! APIRank is new, and we are here to improve it and make it useful to the community.

APIRank only considers APIs with an OpenAPI or Swagger specification. It supports any version of Swagger v2+ or OpenAPI v3+.

However, I agree in practice for people, the "design criterium" is not only the compliance to the spec ;)

Antoine

And as mentioned in the post we filtered soooo many awkward results ^^

Hey, co-author here! Google does not allow you to browse APIs according to Security, Reliability, not Performance, etc.

Google is not an OpenAPI spec indexer either ;)

Congratulations for the lunch Second team. :)

We plan to support authenticated APIs through headers soon. Stay tuned on our Discord https://discord.escape.tech/

Hope this was the login route haha

Smart move would be to use Ngrok I guess ;)

You mean locally?

Hey folks, co-author here. This is in Beta and there is still a lot of work ahead. We are ready for feedback :)

Hey ya'll!

Thank you for your feedback on GraphQL.Security https://graphql.security/

Thousands of you wanted us to provide the same free tool for REST OpenAPIs.

At Escape (YC23), we strived to provide the same user experience and quality of results for REST OpenAPIs (and Swagger) as GraphQL APIs.

OpenAPI.Security is still in alpha, and we would love your feedback and ideas!

Best,

Antoine Cofounder & CTO @ Escape.tech

Hello, the community!

At Escape (WC 23), we released an open-source package (GraphMan) to convert a GraphQL Introspection into a Postman collection automatically. Postman just announced the official collaboration on their website, and we would love your feedback on Graphman!

Best,

Antoine Cofounder & CTO @ https://escape.tech

Hello everyone :)

Here is a tiny article we wrote at Escape (YC W23) to describe the most common vulnerabilities in GraphQL and how to identify & fix them.

Best, Antoine Cofounder & CTO @ Escape.tech

Hello everyone :) I am thrilled to announce that Escape - GraphQL Security is partnering with The Guild Software to make #GraphQL security accessible to everyone. This is a major step forward in the web dev ecosystem! We started by developing fully open source software (GraphQL Armor) which is at the moment compatible with Yoga 2 / Envelop servers, and also Apollo servers. Looking for your feedback!