roottusk/vapi
vAPI is Vulnerable Adversely Programmed Interface which is Self-Hostable API that mimics OWASP API Top 10 scenarios through Exercises.
License & maintenance
GPL-3.0 is a copyleft license: products that include or modify it may have to publish their code.
Last code push 21 months ago.