flounder

Dependency freshness

Declared = lowest version the kit's dependency file (package.json, pyproject.toml or requirements.txt) allows. Latest = the npm "latest" tag or the newest PyPI release. TypeScript, the Stripe SDK, FastAPI and other 0.x packages are shown but not counted in the verdict.

What's in the stack

Framework

Vite

Detected from declared dependencies. A listed package means it's installed, not necessarily fully wired up.

What the README says you get

• Admin
  Governed maintainer experimentshelps a Flounder maintainer agent mine verifier-grounded Evaluation failures
• Deploy
  Local control of code and credentialsAudits run on a daemon, optionally on another machine, so target code and provider credentials stay on the executor host
• Other
  Blind discovery plus reproductionDiscovery runs network-sealed, so findings are derived from the target material
• Other
  Multiple audit scenariosblind capability audits, incident investigation from suspicious on-chain evidence, open-world bug-bounty audits
• Other
  Solidity and ZK fitSolidity/EVM targets work well because local forks and Foundry/Hardhat tests can prove real on-chain effects

Extracted from the kit's README by a local AI model (deepseek-flash) on Oct 12, 2026. Every item is checked against an exact README quote; 9 unverifiable items were discarded. A README claim is the maker's description, not something we tested.