Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
96 changes: 96 additions & 0 deletions techstack.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,96 @@
<!--
&lt;--- Readme.md Snippet without images Start ---&gt;
## Tech Stack
yonasb/syte is built on the following main stack:

- [JavaScript](https://developer.mozilla.org/en-US/docs/Web/JavaScript) – Languages
- [Python](https://www.python.org) – Languages

Full tech stack [here](/techstack.md)

&lt;--- Readme.md Snippet without images End ---&gt;

&lt;--- Readme.md Snippet with images Start ---&gt;
## Tech Stack
yonasb/syte is built on the following main stack:

- <img width='25' height='25' src='https://img.stackshare.io/service/1209/javascript.jpeg' alt='JavaScript'/> [JavaScript](https://developer.mozilla.org/en-US/docs/Web/JavaScript) – Languages
- <img width='25' height='25' src='https://img.stackshare.io/service/993/pUBY5pVj.png' alt='Python'/> [Python](https://www.python.org) – Languages

Full tech stack [here](/techstack.md)

&lt;--- Readme.md Snippet with images End ---&gt;
-->
<div align="center">

# Tech Stack File
![](https://img.stackshare.io/repo.svg "repo") [yonasb/syte](https://github.com/yonasb/syte)![](https://img.stackshare.io/public_badge.svg "public")
<br/><br/>
|14<br/>Tools used|03/13/24 <br/>Report generated|
|------|------|
</div>

## <img src='https://img.stackshare.io/languages.svg'/> Languages (2)
<table><tr>
<td align='center'>
<img width='36' height='36' src='https://img.stackshare.io/service/1209/javascript.jpeg' alt='JavaScript'>
<br>
<sub><a href="https://developer.mozilla.org/en-US/docs/Web/JavaScript">JavaScript</a></sub>
<br>
<sub></sub>
</td>

<td align='center'>
<img width='36' height='36' src='https://img.stackshare.io/service/993/pUBY5pVj.png' alt='Python'>
<br>
<sub><a href="https://www.python.org">Python</a></sub>
<br>
<sub></sub>
</td>

</tr>
</table>

## <img src='https://img.stackshare.io/devops.svg'/> DevOps (2)
<table><tr>
<td align='center'>
<img width='36' height='36' src='https://img.stackshare.io/service/1046/git.png' alt='Git'>
<br>
<sub><a href="http://git-scm.com/">Git</a></sub>
<br>
<sub></sub>
</td>

<td align='center'>
<img width='36' height='36' src='https://img.stackshare.io/service/12572/-RIWgodF_400x400.jpg' alt='PyPI'>
<br>
<sub><a href="https://pypi.org/">PyPI</a></sub>
<br>
<sub></sub>
</td>

</tr>
</table>


## <img src='https://img.stackshare.io/group.svg' /> Open source packages (10)</h2>

## <img width='24' height='24' src='https://img.stackshare.io/service/12572/-RIWgodF_400x400.jpg'/> PyPI (10)

|NAME|VERSION|LAST UPDATED|LAST UPDATED BY|LICENSE|VULNERABILITIES|
|:------|:------|:------|:------|:------|:------|
|[Django](https://pypi.org/project/Django)|v1.4|05/27/12|Rodrigo Neri |BSD-3-Clause|[CVE-2021-44420](https://github.com/advisories/GHSA-v6rh-hp5x-86rv) (High)<br/>[CVE-2014-0472](https://github.com/advisories/GHSA-rvq6-mrpv-m6rm) (Moderate)<br/>[CVE-2012-3444](https://github.com/advisories/GHSA-5h2q-4hrp-v9rr) (Moderate)|
|[certifi](https://pypi.org/project/certifi)|v0.0.8|05/27/12|Rodrigo Neri |MPL-2.0|N/A|
|[chardet](https://pypi.org/project/chardet)|v1.0.1|05/27/12|Rodrigo Neri |LGPL-2.1|N/A|
|[gunicorn](https://pypi.org/project/gunicorn)|v0.14.2|05/27/12|Rodrigo Neri |MIT|[CVE-2018-1000164](https://github.com/advisories/GHSA-32pc-xphx-q4f6) (High)|
|[httplib2](https://pypi.org/project/httplib2)|v0.7.4|05/27/12|Rodrigo Neri |MIT|[CVE-2020-11078](https://github.com/advisories/GHSA-gg84-qgv9-w4pq) (Low)<br/>[CVE-2021-21240](https://github.com/advisories/GHSA-93xj-8mrv-444m) (Low)|
|[oauthlib](https://pypi.org/project/oauthlib)|v0.1.3|05/27/12|Rodrigo Neri |BSD-3-Clause|N/A|
|[psycopg2](https://pypi.org/project/psycopg2)|v2.4.5|05/27/12|Rodrigo Neri |BSD-3-Clause-Attribution|N/A|
|[pyasn1](https://pypi.org/project/pyasn1)|v0.1.3|05/27/12|Rodrigo Neri |BSD-2-Clause|N/A|
|[requests](https://pypi.org/project/requests)|v0.12.1|05/27/12|Rodrigo Neri |Apache-2.0|[CVE-2018-18074](https://github.com/advisories/GHSA-x84v-xcm2-53pg) (High)<br/>[CVE-2014-1830](https://github.com/advisories/GHSA-652x-xj99-gmcc) (Moderate)<br/>[CVE-2014-1829](https://github.com/advisories/GHSA-cfj3-7x9c-4p3h) (Moderate)|
|[rsa](https://pypi.org/project/rsa)|v3.0.1|05/27/12|Rodrigo Neri |Apache-2.0|[CVE-2020-13757](https://github.com/advisories/GHSA-537h-rv9q-vvph) (High)<br/>[CVE-2016-1494](https://github.com/advisories/GHSA-8rjr-6qq5-pj9p) (Moderate)<br/>[CVE-2020-25658](https://github.com/advisories/GHSA-xrx6-fmxq-rjj2) (Moderate)|

<br/>
<div align='center'>

Generated via [Stack File](https://github.com/marketplace/stack-file)
273 changes: 273 additions & 0 deletions techstack.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,273 @@
repo_name: yonasb/syte
report_id: c38788f8f5d63b406e111f87aef3092e
version: 0.1
repo_type: Public
timestamp: '2024-03-13T16:30:23+00:00'
requested_by: rigoneri
provider: github
branch: master
detected_tools_count: 14
tools:
- name: JavaScript
description: Lightweight, interpreted, object-oriented language with first-class
functions
website_url: https://developer.mozilla.org/en-US/docs/Web/JavaScript
open_source: true
hosted_saas: false
category: Languages & Frameworks
sub_category: Languages
image_url: https://img.stackshare.io/service/1209/javascript.jpeg
detection_source_url: https://github.com/yonasb/syte
detection_source: Repo Metadata
- name: Python
description: A clear and powerful object-oriented programming language, comparable
to Perl, Ruby, Scheme, or Java.
website_url: https://www.python.org
open_source: true
hosted_saas: false
category: Languages & Frameworks
sub_category: Languages
image_url: https://img.stackshare.io/service/993/pUBY5pVj.png
detection_source_url: https://github.com/yonasb/syte
detection_source: Repo Metadata
- name: Git
description: Fast, scalable, distributed revision control system
website_url: http://git-scm.com/
open_source: true
hosted_saas: false
category: Build, Test, Deploy
sub_category: Version Control System
image_url: https://img.stackshare.io/service/1046/git.png
detection_source_url: https://github.com/yonasb/syte
detection_source: Repo Metadata
- name: PyPI
description: A repository of software for the Python programming language
website_url: https://pypi.org/
open_source: false
hosted_saas: false
category: Build, Test, Deploy
sub_category: Hosted Package Repository
image_url: https://img.stackshare.io/service/12572/-RIWgodF_400x400.jpg
detection_source_url: https://github.com/yonasb/syte/blob/master/requirements.txt
detection_source: requirements.txt
last_updated_by: Rodrigo Neri
last_updated_on: 2012-05-27 03:32:07.000000000 Z
- name: Django
description: A high-level Python Web framework that encourages rapid development
and clean
package_url: https://pypi.org/project/Django
version: '1.4'
license: BSD-3-Clause
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/19832/default_58dbe7b4d7ec447b62773209af0f9a31bbabf5bd.png
detection_source_url: https://github.com/yonasb/syte/blob/master/requirements.txt
detection_source: requirements.txt
last_updated_by: Rodrigo Neri
last_updated_on: 2012-05-27 03:32:07.000000000 Z
vulnerabilities:
- name: Potential bypass of an upstream access control based on URL paths in Django
cve_id: CVE-2021-44420
cve_url: https://github.com/advisories/GHSA-v6rh-hp5x-86rv
detected_date: Dec 14
severity: high
first_patched: 2.2.25
- name: Code Injection in Django
cve_id: CVE-2014-0472
cve_url: https://github.com/advisories/GHSA-rvq6-mrpv-m6rm
detected_date: Feb 24
severity: moderate
first_patched: 1.4.11
- name: Django vulnerable to Improper Restriction of Operations within the Bounds
of a Memory Buffer
cve_id: CVE-2012-3444
cve_url: https://github.com/advisories/GHSA-5h2q-4hrp-v9rr
detected_date: Apr 22
severity: moderate
first_patched: 1.4.1
- name: certifi
description: Python package for providing Mozilla's CA Bundle
package_url: https://pypi.org/project/certifi
version: 0.0.8
license: MPL-2.0
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/19849/default_75c38a39b9f0062814489e2ec2cbfca0ca15d9ba.png
detection_source_url: https://github.com/yonasb/syte/blob/master/requirements.txt
detection_source: requirements.txt
last_updated_by: Rodrigo Neri
last_updated_on: 2012-05-27 03:32:07.000000000 Z
- name: chardet
description: Universal encoding detector for Python 2 and 3
package_url: https://pypi.org/project/chardet
version: 1.0.1
license: LGPL-2.1
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/19856/default_4a8a8fdc10130068bf295812b98e9b72fb42fe70.png
detection_source_url: https://github.com/yonasb/syte/blob/master/requirements.txt
detection_source: requirements.txt
last_updated_by: Rodrigo Neri
last_updated_on: 2012-05-27 03:32:07.000000000 Z
- name: gunicorn
description: WSGI HTTP Server for UNIX
package_url: https://pypi.org/project/gunicorn
version: 0.14.2
license: MIT
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/19931/default_74a0c20721d3a0a1484d69586401591fe8993db2.png
detection_source_url: https://github.com/yonasb/syte/blob/master/requirements.txt
detection_source: requirements.txt
last_updated_by: Rodrigo Neri
last_updated_on: 2012-05-27 03:32:07.000000000 Z
vulnerabilities:
- name: Gunicorn contains Improper Neutralization of CRLF sequences in HTTP headers
cve_id: CVE-2018-1000164
cve_url: https://github.com/advisories/GHSA-32pc-xphx-q4f6
detected_date: Aug 22
severity: high
first_patched: 19.5.0
- name: httplib2
description: A comprehensive HTTP client library
package_url: https://pypi.org/project/httplib2
version: 0.7.4
license: MIT
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/19914/default_37434feaacace26053e41d6e4802560af16ebe44.png
detection_source_url: https://github.com/yonasb/syte/blob/master/requirements.txt
detection_source: requirements.txt
last_updated_by: Rodrigo Neri
last_updated_on: 2012-05-27 03:32:07.000000000 Z
vulnerabilities:
- name: CRLF injection in httplib2
cve_id: CVE-2020-11078
cve_url: https://github.com/advisories/GHSA-gg84-qgv9-w4pq
detected_date: Aug 22
severity: low
first_patched: 0.18.0
- name: Regular Expression Denial of Service (REDoS) in httplib2
cve_id: CVE-2021-21240
cve_url: https://github.com/advisories/GHSA-93xj-8mrv-444m
detected_date: Aug 22
severity: low
first_patched: 0.19.0
- name: oauthlib
description: A generic
package_url: https://pypi.org/project/oauthlib
version: 0.1.3
license: BSD-3-Clause
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/20048/default_d9e0956c82c17d568b62f3b0d5e2080c1e501e59.png
detection_source_url: https://github.com/yonasb/syte/blob/master/requirements.txt
detection_source: requirements.txt
last_updated_by: Rodrigo Neri
last_updated_on: 2012-05-27 03:32:07.000000000 Z
- name: psycopg2
description: Psycopg2 - Python-PostgreSQL Database Adapter
package_url: https://pypi.org/project/psycopg2
version: 2.4.5
license: BSD-3-Clause-Attribution
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/20416/default_64aa60b33468d1d28611966765867676f6303b64.png
detection_source_url: https://github.com/yonasb/syte/blob/master/requirements.txt
detection_source: requirements.txt
last_updated_by: Rodrigo Neri
last_updated_on: 2012-05-27 03:32:07.000000000 Z
- name: pyasn1
description: ASN.1 types and codecs
package_url: https://pypi.org/project/pyasn1
version: 0.1.3
license: BSD-2-Clause
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/19915/default_37434feaacace26053e41d6e4802560af16ebe44.png
detection_source_url: https://github.com/yonasb/syte/blob/master/requirements.txt
detection_source: requirements.txt
last_updated_by: Rodrigo Neri
last_updated_on: 2012-05-27 03:32:07.000000000 Z
- name: requests
description: Python HTTP for Humans
package_url: https://pypi.org/project/requests
version: 0.12.1
license: Apache-2.0
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/19826/default_d7c684bf2673f008a9f02ac93901229297a22d7e.png
detection_source_url: https://github.com/yonasb/syte/blob/master/requirements.txt
detection_source: requirements.txt
last_updated_by: Rodrigo Neri
last_updated_on: 2012-05-27 03:32:07.000000000 Z
vulnerabilities:
- name: Insufficiently Protected Credentials in Requests
cve_id: CVE-2018-18074
cve_url: https://github.com/advisories/GHSA-x84v-xcm2-53pg
detected_date: Aug 22
severity: high
first_patched: 2.20.0
- name: Exposure of Sensitive Information to an Unauthorized Actor in Requests
cve_id: CVE-2014-1830
cve_url: https://github.com/advisories/GHSA-652x-xj99-gmcc
detected_date: Jul 8
severity: moderate
first_patched: 2.3.0
- name: Exposure of Sensitive Information to an Unauthorized Actor in Requests
cve_id: CVE-2014-1829
cve_url: https://github.com/advisories/GHSA-cfj3-7x9c-4p3h
detected_date: Jul 8
severity: moderate
first_patched: 2.3.0
- name: rsa
description: Pure-Python RSA implementation
package_url: https://pypi.org/project/rsa
version: 3.0.1
license: Apache-2.0
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/20021/default_faea030602e3d71554c57e6fc53190ac830da00d.png
detection_source_url: https://github.com/yonasb/syte/blob/master/requirements.txt
detection_source: requirements.txt
last_updated_by: Rodrigo Neri
last_updated_on: 2012-05-27 03:32:07.000000000 Z
vulnerabilities:
- name: Python-RSA decryption of ciphertext leads to DoS
cve_id: CVE-2020-13757
cve_url: https://github.com/advisories/GHSA-537h-rv9q-vvph
detected_date: Aug 22
severity: high
first_patched: '4.1'
- name: Python RSA allows attackers to spoof signatures
cve_id: CVE-2016-1494
cve_url: https://github.com/advisories/GHSA-8rjr-6qq5-pj9p
detected_date: Jul 29
severity: moderate
first_patched: '3.3'
- name: Timing attacks in python-rsa
cve_id: CVE-2020-25658
cve_url: https://github.com/advisories/GHSA-xrx6-fmxq-rjj2
detected_date: Aug 22
severity: moderate
first_patched: '4.7'