Botd vs National Vulnerability Database

BotD is FingerprintJS's open-source, MIT-licensed JavaScript library that runs entirely in the browser to flag basic automation -- headless Chrome, PhantomJS, Selenium, and similar tools -- without any server round-trip for the detection itself. It ships as an npm package or as a CDN-hosted ES module and returns a plain detected/bot-kind result object from a single detect() call. It is free for any use with no signup; FingerprintJS separately sells a more sophisticated, paid, server-side Bot Detection API for teams that need those extra signals.

NIST's NVD API 2.0 is the government's canonical feed of CVE records, each enriched with CVSS scores, CPE product matches, CWE weakness types, and (where applicable) CISA Known Exploited Vulnerabilities flags. It's fully public and keyless, though a free API key lifts the rolling rate limit from 5 to 50 requests per 30 seconds, and NIST recommends polling by lastModStartDate/lastModEndDate rather than re-pulling the whole dataset. The stored URL pointed at a legacy JSON-feed changelog page; corrected to the current "Start Here" developer docs for the 2.0 REST API.