Huge kudos to @steventey for putting the cards on the table. All code has vulnerabilities. It's not something to be ashamed of. What matters is that you are on the lookout and act quickly.
deepsec is quite possibly one of the best security tools I've tried so far we get a ton of "security reports" @dubdotco and only a handful of those are actually actionable with deepsec, we were able to detect several valuable issues from the get-go and secure our application
