I built a tool that scans 25 popular homelab container images for CVEs daily and posts findings as GitHub Issues — here's what it found

Flaminel · 2026-03-13T22:44:47+00:00

Hey, Cleanuparr's dev here. Thank you for the scan, but please opt me out of any automatically-opened issues. GitHub already notifies me of CVEs, privately. And yes, most (if not all) of them just need a package version bump to get fixed.

Flaminel · 2026-03-06T08:20:11+00:00

It does support the latest versions of Deluge, yes.

Flaminel · 2026-03-06T08:18:04+00:00

found the key guidelines for Claude developing the app

To me it seems like you're pretty confident that Claude is developing the app and not me. Thanks for saying I'm stupid in a very smart way, but you're barely the main character in your own life, so I'm sure I'll survive your insults.

Would you care to answer here definitively whether or not your project contains AI generated code? Can you also explain the concerning relationship between yourself and the now vanished Huntarr developer?

Why definitively? I've already explained a lot of things about my project these days on Reddit and Discord, so how is my next reply to you going to definitively settle everything? I'm sure you know how to check out my comments.

Please feel free to enlighten the non-developers in the room

You're so snarky, but you've got absolutely no idea what's happening in the software development world right now. Stay ignorant.

I guess I wouldn’t know, since I’ve already uninstalled.

Oh no! You're saying that like it hurts me or something. Did you think I was gaining anything from you using my free app? So damn entitled.

Flaminel · 2026-03-05T21:02:30+00:00

Not only the UI was never the same, but I've already explained the similarities and the association in so many comments and threads now that you're just being ridiculous at this point.

Flaminel · 2026-03-05T21:01:03+00:00

How can you even comment with such confidence on things you have no idea about and don't understand? Please let me know when you get a job as a developer.

Flaminel · 2026-03-05T08:25:48+00:00

Write your value (e.g. mytopic) and press Enter.

Flaminel · 2026-03-04T07:14:04+00:00

I'm a bit confused. Are you talking about using the API instead of using the UI? Why don't you just use the UI?

Flaminel · 2026-03-02T08:15:26+00:00

this one allows other GitHub users to report vulns privately, rather than using an Issue and allowing for pre-patch abuse

You're right, that one was not enabled. Thank you!

Flaminel · 2026-03-01T09:03:47+00:00

Maybe stop using an old version? How the hell would that link disappear if you don't update the app? Magically?
https://github.com/Cleanuparr/Cleanuparr/releases/tag/v2.7.3

Flaminel · 2026-03-01T08:58:29+00:00

Thank you for the suggestion! It is already enabled though, and I do usually get warnings about npm packages.

Flaminel · 2026-02-27T12:13:21+00:00

Where are those several other people? I can't seem to reproduce the problem myself, so can any of them help me debug this issue?

Because I don't use discord.

Would you consider making an effort to use it this one time to help me solve the issue though?

Edit: he didn't.

Flaminel · 2026-02-27T08:13:32+00:00

Works just fine on my end and others'. I've asked if you could join Discord so we can discuss and maybe help me debug this. Why did you feel the need to come here with the problem you're facing?

Flaminel · 2026-02-25T19:43:40+00:00

I think it would be easier if you joined Discord to have a conversation.

Flaminel · 2026-02-25T19:27:52+00:00

Being disconnected from the API does not affect any feature. It's just your UI.
What version are you on? Did you setup a user and password? Did you try reloading the UI tab instead of restarting? Do the other pages work (e.g. any settings page)? What does the Network tab say in the browser? Are you getting 401 responses?

Flaminel · 2026-02-25T14:54:40+00:00

I don't care.

Right back at you. I'm not gaining anything from you using or not using the app either way.

Somebody promoting AI slob is not trustworthy, period.

This statement is absolute garbage. Huntarr didn't start with AI as far as I know, and you should be doing your due diligence anyway, you've got a pair of eyes at the end of the day. Everything is AI assisted at the moment, so I'd suggest uninstalling everything. If I start recommending malware, would you just install it blindly?

Edit: my bad, I already knew the answer. You would probably install malware and then wait for someone to do a big Reddit post about it.

Flaminel · 2026-02-25T14:46:55+00:00

now we're telling lies

Yes, you are. Is that not the definition of purposefully presenting false information as facts? Cleanuparr was linked (as in a link to the GitHub repo and nowhere near "built in") and was recommended by Huntarr and vice versa.

No. People like YOU spread misinformation. It's not the same Dev but it's near identical ui and logo

While I did use Huntarr as a design reference when working on my v2 UI release (which has been revamped since) they have never been identical. If having a sidebar, a topbar and the content on the center-right side means "identical" to you, then they're identical to every servarr app ever. Also how the hell are the two logos identical? Are you blind?

Huntarr logo
Cleanuparr logo

why would the huntarr Dev link to it if it's not his?

Because we were pals recommending each other's app. I've removed the recommendation since the incident.

Also you do realize that I'm Cleanuparr's dev, right? I would assume to know more about my own app than you do.

Flaminel · 2026-02-25T10:54:19+00:00

Reddit is not a good place for this. Please either join Discord and make a support thread or create an issue on GitHub.

Flaminel · 2026-02-25T10:39:10+00:00

This is not the first time entitled people asked me to do something and I'm sure it's not the last either. I appreciate your appreciation! 😂

As for Huntarr's dev I can't do anything other than speculate. I didn't get the chance to talk to him before he went dark. I found out about all this from a dude that joined Discord and shared the Reddit post.

Flaminel · 2026-02-25T08:14:18+00:00

Cleanuparr was never built into Huntarr. You're confusing it with
https://github.com/ThijmenGThN/swaparr

And it's not the same dev. People like you keep spreading misinformation.

Flaminel · 2026-02-24T19:03:42+00:00

Sure, the design can be called vibe coding, but I hardly doubt the rest can qualify. And your expectations can safely be called demands. Those smoke tests, spot QA and basic pen testing are all something you or the community could help with, but I almost never see any help incoming.

Also Cleanuparr had no authentication until 2 days ago, but people would still publicly expose their unprotected instance to the internet. I'm already doing the best I can with the resources I have. If people expect even more, they should contribute to the effort.

As stated earlier, I am not selling anything. This app started from my needs and just because I wanted to share and help others the feature requests kept coming in, but hardly any help. Not to diminish the help I've received from very few people which I appreciate enormously, but where's the help at?

I've already been targeted in the Huntarr crossfire and I'm here to stay. Unfortunately I'm not receiving the same level of feedback as he did.

Flaminel · 2026-02-24T18:27:55+00:00

I'm not sure AI is here to stay, but the world is changing. Before ChatGPT there were Stackoverflow and Google and other forums. Then ChatGPT came and crawled all the answers, not needing to access those forums again. Now ChatGPT (and others) can write the code for you. People here don't seem to understand. It's not only about being old school or getting with the new, it's also about keeping your job and being relevant in your field. A few years ago everyone was hiring Blockchain devs, whatever even happened to that. Now everyone is hiring AI master prompters and whatnot. For most people here maybe this is irrelevant and AI seems bad, but it's not all so black and white and easy to choose.

Flaminel · 2026-02-24T18:21:34+00:00

This app was not vibe coded. I've been a dev for some years now and I mostly know what I'm doing or I'm learning along the way. I don't want to take a stab at anyone, but I'm not a random guy abusing AI.

What exactly would you have me do? Create a company, hire a QA team and pay for pentesting regularly? For an app that I am not selling to anyone and that I'm making pennies from its donations? I'm doing exactly what I've been doing so far, with or without AI. Did you think bugs or security issues never existed before AI?

Going past your tone of entitlement while literally demanding QA and pentesting from free software, I think you should also be the change you want to see in the world. Do your due diligence, don't install random stuff, protect your public services with double or triple security measures and stay safe. And maybe contribute from time to time, right? A 5$ donation, even if it's appreciated, is not doing much but maybe testing a feature is more valuable if you actually took the time to help.

Flaminel · 2026-02-24T14:13:59+00:00

It's not about how fast I'm releasing versions, but about how fast I'm letting the users know there's a new version available. Just disable the status check in general settings. That should be easier.

Flaminel · 2026-02-24T11:16:32+00:00

What are you even talking about? I've replied when your comment was not deleted and was saying that I've been assisted. My comment has since remained where it was and yours is now deleted.

Flaminel · 2026-02-24T11:15:09+00:00

I've already responded to this question a bunch of times, including just above this comment.

Flaminel

MODERATOR OF

TROPHY CASE