Damn Vulnerable Web Application (DVWA) is curated in the Awesome Security awesome list under Docker Images for Penetration Testing & Security.
This entry links to an external website rather than a GitHub repository, so there's no README to display here.