This is a demo application, not intended for real use. The vulnerabilities are intentional, so you can see what a vulnerability report looks like on Snyk.
It's used as a part of a tutorial for running snyk, and was initially based on falcor-hapi-demo.
For more details, read the Snyk documentation.