w3bs.AccountStart building
PACKAGES / Profullstack

crawlproof

Terminal dashboard showing CrawlProof traffic, ad delivery and CoinPay revenue for a fleet of sites.

ThreatCrush · No malware found
INSTALLw3bs install crawlproof.com/crawlproof

No w3bs yet? curl -fsSL https://w3bs.org/install.sh | sh

Get started

What to type once it is installed.

  1. w3bs install crawlproof.com/crawlproofInstall crawlproof and track it for updates
  2. crawlproof dashboardOpen live ROI, traffic, ads, money and spend screens
  3. crawlproof stats <site>Print a site's sources, referrers and top pages
  4. crawlproof ad <url> --draftRead a page and draft an ad campaign for it
  5. crawlproof ads trendsShow which topics are trending for ad targeting

Every option: crawlproof --help · docs ↗

Malware scan

ThreatCrush found no malware indicators in crawlproof 0.5.0. The other findings below are ordinary code-review notes, not malware.

Scanned
2026-11-05 04:47 UTC · threatcrush 0.13.30
Files
1479 (installer + github.com/profullstack/crawlproof.com)
Findings
2 high · 30 medium · 18 low
50 other findings (not malware)
  • high
    TLS certificate verification disabledsource/lib/onion.ts:48tls-verification-disabled · CWE-295
  • high
    Hardcoded Credentialsource/lib/sp/platforms/facebook.ts:32secret-generic-credential · CWE-798
  • medium
    unescaped HTML renderingsource/app/(app)/dashboard/admin/email-broadcast/EmailBroadcastForm.tsx:125js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/app/(app)/dashboard/projects/[id]/autoblog/articles/[articleId]/page.tsx:214js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/app/(marketing)/blog/[slug]/page.tsx:74js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/app/(marketing)/blog/[slug]/page.tsx:102js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/app/(marketing)/recent/page.tsx:177js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/app/(marketing)/recent/page.tsx:181js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/app/c/[project]/[slug]/page.tsx:76js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/app/c/[project]/page.tsx:58js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/app/careers.js/route.ts:228js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/app/careers.js/route.ts:285js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/app/layout.tsx:129js-unescaped-html-sink · CWE-79
  • medium
    redirect to a non-constant destinationsource/app/login/form.tsx:40js-open-redirect · CWE-601
  • medium
    unescaped HTML renderingsource/app/r/[token]/page.tsx:164js-unescaped-html-sink · CWE-79
  • medium
    redirect to a non-constant destinationsource/app/signup/form.tsx:65js-open-redirect · CWE-601
  • medium
    unescaped HTML renderingsource/app/surveys/[slug]/invite/page.tsx:68js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/components/json-ld.tsx:8js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/components/pit-footer.tsx:17js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/components/report/markdown-view.tsx:16js-unescaped-html-sink · CWE-79
  • medium
    unescaped HTML renderingsource/lib/careers/page-templates.ts:198js-unescaped-html-sink · CWE-79
  • medium
    dynamic code executionsource/lib/crawl-limits.ts:67js-dynamic-code-execution · CWE-95
  • medium
    regex with nested unbounded quantifierssource/lib/emailMarkdown.ts:41redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/lib/emailMarkdown.ts:324redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/lib/lx/articleGen.ts:100redos-nested-quantifier · CWE-1333
  • medium
    regex with nested unbounded quantifierssource/lib/tracker/agent-gate.ts:61redos-nested-quantifier · CWE-1333
  • medium
    predictable temporary filesource/ops/selfhost/server/setup-supabase.sh:218sh-predictable-temp-path · CWE-377
  • medium
    SQL built from a template literal or f-stringsource/scripts/detect-slot-themes.ts:31sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/scripts/purge-constructed-keywords.ts:163sql-template-interpolation · CWE-89
  • medium
    SQL built from a template literal or f-stringsource/scripts/purge-offniche-keywords.ts:124sql-template-interpolation · CWE-89
  • medium
    dynamic code executionsource/scripts/test-crawl-limits.mjs:14js-dynamic-code-execution · CWE-95
  • medium
    dynamic code executionsource/scripts/test-crawl-limits.mjs:24js-dynamic-code-execution · CWE-95
  • low
    Hardcoded Credentialsource/app/(marketing)/docs/autoblog-webhook/page.tsx:156secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/lib/sealed/migrate.ts:38secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/lib/sp/platforms/linkedin.ts:25secret-generic-credential · CWE-798
  • low
    Generic API Keysource/tests/ads-generator-agent.test.ts:160secret-generic-api-key · CWE-798
  • low
    Generic API Keysource/tests/ads-generator-agent.test.ts:187secret-generic-api-key · CWE-798
  • low
    dynamic code executionsource/tests/careers-page-templates.test.ts:21js-dynamic-code-execution · CWE-95
  • low
    dynamic code executionsource/tests/careers-widget-script.test.ts:19js-dynamic-code-execution · CWE-95
  • low
    dynamic code executionsource/tests/careers-widget-script.test.ts:69js-dynamic-code-execution · CWE-95
  • low
    dynamic code executionsource/tests/contract/ad-visitor-id.test.ts:51js-dynamic-code-execution · CWE-95
  • low
    dynamic code executionsource/tests/contract/ad-visitor-id.test.ts:52js-dynamic-code-execution · CWE-95
  • low
    dynamic code executionsource/tests/contract/ads-click-cooldown-redis.test.ts:20js-dynamic-code-execution · CWE-95
  • low
    dynamic code executionsource/tests/contract/ads-click-cooldown-redis.test.ts:24js-dynamic-code-execution · CWE-95
  • low
    dynamic code executionsource/tests/contract/ads-click-cooldown-redis.test.ts:25js-dynamic-code-execution · CWE-95
  • low
    dynamic code executionsource/tests/contract/ads-click-cooldown-redis.test.ts:26js-dynamic-code-execution · CWE-95
  • low
    dynamic code executionsource/tests/contract/ads-click-cooldown-redis.test.ts:31js-dynamic-code-execution · CWE-95
  • low
    dynamic code executionsource/tests/contract/ads-click-cooldown-redis.test.ts:35js-dynamic-code-execution · CWE-95
  • low
    Hardcoded Credentialsource/tests/contract/posthog-integration.test.ts:13secret-generic-credential · CWE-798
  • low
    Hardcoded Credentialsource/tests/lead-campaign.test.ts:16secret-generic-credential · CWE-798

Badge for your README

ThreatCrush: No malware found

[![ThreatCrush scan](https://w3bs.org/api/packages/crawlproof.com/crawlproof/badge.svg)](https://w3bs.org/packages/crawlproof.com/crawlproof)