A great example is: https://github.com/andresriancho/w3af-moth
He deliberately wrote vulnerable code to test his auditing script. There are more repos like this.
He deliberately wrote vulnerable code to test his auditing script. There are more repos like this.