dead-drop vs National Vulnerability Database

dead-drop is a minimal, self-hostable API for sharing ephemeral secrets: the client encrypts the payload before it ever reaches the server, so the backend only ever stores ciphertext it cannot read, and each secret can be set to self-destruct after a single view or a time limit. It needs no account or API key — requests are simply rate-limited per IP — and returns plain JSON over a small REST surface. The design mirrors the classic one-time-secret pattern used for sharing passwords or tokens without leaving a permanent copy anywhere.

NIST's NVD API 2.0 is the government's canonical feed of CVE records, each enriched with CVSS scores, CPE product matches, CWE weakness types, and (where applicable) CISA Known Exploited Vulnerabilities flags. It's fully public and keyless, though a free API key lifts the rolling rate limit from 5 to 50 requests per 30 seconds, and NIST recommends polling by lastModStartDate/lastModEndDate rather than re-pulling the whole dataset. The stored URL pointed at a legacy JSON-feed changelog page; corrected to the current "Start Here" developer docs for the 2.0 REST API.