If you worked a lot with BaaS like Supabase or use vibe coding platforms like Lovable, you might? know they need they can leak quickly data. So I wrote a small tool: unruly. Give it a URL, it shows you what an attacker can write or read. github.com/eppser/unruly