OhShit! turns public security advisories and breach reports into a feed developers can act on. Each incident has a severity level, affected products, source links and a cleanup checklist. Check supported runtime versions, or follow incidents through RSS, a free JSON API and an MCP server. The code and incident data are open source.