diff --git a/techstack.md b/techstack.md new file mode 100644 index 0000000..8e878da --- /dev/null +++ b/techstack.md @@ -0,0 +1,183 @@ + +
+ +# Tech Stack File +![](https://img.stackshare.io/repo.svg "repo") [Xcov19/registrations](https://github.com/Xcov19/registrations)![](https://img.stackshare.io/public_badge.svg "public") +

+|32
Tools used|06/23/24
Report generated| +|------|------| +
+ +## Languages (1) + + + + +
+ Python +
+ Python +
+ +
+ +## Frameworks (1) + + + + +
+ FastAPI +
+ FastAPI +
+ v0.78.0 +
+ +## Data (3) + + + + + + + + +
+ DB +
+ DB +
+ +
+ MongoDB +
+ MongoDB +
+ +
+ PostgreSQL +
+ PostgreSQL +
+ +
+ +## DevOps (4) + + + + + + + + + + +
+ Docker +
+ Docker +
+ +
+ Git +
+ Git +
+ +
+ GitHub Actions +
+ GitHub Actions +
+ +
+ PyPI +
+ PyPI +
+ +
+ +## Other (1) + + + + +
+ Shell +
+ Shell +
+ +
+ + +## Open source packages (22) + +## PyPI (22) + +|NAME|VERSION|LAST UPDATED|LAST UPDATED BY|LICENSE|VULNERABILITIES| +|:------|:------|:------|:------|:------|:------| +|[gunicorn](https://pypi.org/project/gunicorn)|v20.1.0|07/02/22|codecakes |MIT|[CVE-2024-1135](https://github.com/advisories/GHSA-w3h3-4rj7-4ph4) (High)| +|[black](https://pypi.org/project/black)|v22.6.0|07/02/22|codecakes |MIT|[CVE-2024-21503](https://github.com/advisories/GHSA-fj7x-q9j7-g6q6) (Moderate)| +|[pydantic](https://pypi.org/project/pydantic)|v1.9.2|07/02/22|codecakes |MIT|[CVE-2024-3772](https://github.com/advisories/GHSA-mr82-8j83-vxmv) (Moderate)| +|[pymongo](https://pypi.org/project/pymongo)|v3.12.3|02/13/22|codecakes |Apache-2.0|[CVE-2024-5629](https://github.com/advisories/GHSA-m87m-mmvp-v9qm) (Moderate)
[](https://github.com/advisories/GHSA-cr6f-gf5w-vhrc) (Moderate)| +|[requests](https://pypi.org/project/requests)|v2.31.0|10/30/23|dependabot[bot] |Apache-2.0|[CVE-2024-35195](https://github.com/advisories/GHSA-9wx4-h78v-vm56) (Moderate)| +|[Cython](https://pypi.org/project/Cython)|v0.29.27|07/02/22|codecakes |Apache-2.0|N/A| +|[SQLAlchemy](https://pypi.org/project/SQLAlchemy)|v1.4.27|02/13/22|codecakes |MIT|N/A| +|[anyio](https://pypi.org/project/anyio)|v3.6.1|07/02/22|codecakes |MIT|N/A| +|[databases](https://pypi.org/project/databases)|v0.5.5|02/13/22|codecakes |BSD-3-Clause|N/A| +|[email-validator](https://pypi.org/project/email-validator)|v1.2.1|07/02/22|codecakes |Unlicense|N/A| +|[isort](https://pypi.org/project/isort)|v5.10.1|07/18/22|codecakes |MIT|N/A| +|[motor](https://pypi.org/project/motor)|v2.5.1|02/13/22|codecakes |Apache-2.0|N/A| +|[mypy](https://pypi.org/project/mypy)|v0.971|08/15/22|codecakes |MIT|N/A| +|[phonenumbers](https://pypi.org/project/phonenumbers)|v8.12.53|07/02/22|codecakes |Apache-2.0|N/A| +|[pre-commit](https://pypi.org/project/pre-commit)|v2.20.0|07/18/22|codecakes |MIT|N/A| +|[psycopg2-binary](https://pypi.org/project/psycopg2-binary)|v2.9.3|07/02/22|codecakes |BSD-3-Clause-Attribution|N/A| +|[pylint](https://pypi.org/project/pylint)|v2.14.5|07/13/22|codecakes |GPL-2.0|N/A| +|[pysqlite3](https://pypi.org/project/pysqlite3)|v0.4.7|02/13/22|codecakes |Zlib|N/A| +|[pytest](https://pypi.org/project/pytest)|v7.1.2|07/18/22|codecakes |MIT|N/A| +|[pytest-asyncio](https://pypi.org/project/pytest-asyncio)|v0.19.0|07/18/22|codecakes |Apache-2.0|N/A| +|[ujson](https://pypi.org/project/ujson)|v5.4.0|07/13/22|codecakes |DSDP|N/A| +|[uvloop](https://pypi.org/project/uvloop)|v0.16.0|02/13/22|codecakes |Apache-2.0|N/A| + +
+
+ +Generated via [Stack File](https://github.com/marketplace/stack-file) diff --git a/techstack.yml b/techstack.yml new file mode 100644 index 0000000..836358d --- /dev/null +++ b/techstack.yml @@ -0,0 +1,483 @@ +repo_name: Xcov19/registrations +report_id: 4bcae6d68be79f58d9854ab08a8de354 +version: 0.1 +repo_type: Public +timestamp: '2024-06-23T19:33:12+00:00' +requested_by: dependabot[bot] +provider: github +branch: develop +detected_tools_count: 32 +tools: +- name: Python + description: A clear and powerful object-oriented programming language, comparable + to Perl, Ruby, Scheme, or Java. + website_url: https://www.python.org + open_source: true + hosted_saas: false + category: Languages & Frameworks + sub_category: Languages + image_url: https://img.stackshare.io/service/993/pUBY5pVj.png + detection_source_url: https://github.com/Xcov19/registrations + detection_source: Repo Metadata +- name: FastAPI + description: A high performance, easy to learn, fast to code, ready for production + web framework + website_url: https://fastapi.tiangolo.com/ + version: 0.78.0 + license: MIT + open_source: true + hosted_saas: false + category: Languages & Frameworks + sub_category: Microframeworks (Backend) + image_url: https://img.stackshare.io/service/25014/default_f6ff39141b468e832d1bc59fc98a060df604d44d.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-02-13 15:34:38.000000000 Z +- name: DB + description: 'Version control for databases: save, restore, and archive snapshots + of your database from the command line' + website_url: https://github.com/infostreams/db + license: MIT + open_source: true + hosted_saas: false + category: Data Stores + sub_category: Database Tools + image_url: https://img.stackshare.io/service/11593/no-img.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/docker-compose.yaml + detection_source: docker-compose.yaml + last_updated_by: codecakes + last_updated_on: 2021-09-06 11:00:53.000000000 Z +- name: MongoDB + description: The database for giant ideas + website_url: http://www.mongodb.com/ + open_source: true + hosted_saas: false + category: Data Stores + sub_category: Databases + image_url: https://img.stackshare.io/service/1030/leaf-360x360.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/settings.py + detection_source: settings.py + last_updated_by: codecakes + last_updated_on: 2022-02-13 15:34:38.000000000 Z +- name: PostgreSQL + description: A powerful, open source object-relational database system + website_url: http://www.postgresql.org/ + open_source: true + hosted_saas: false + category: Data Stores + sub_category: Databases + image_url: https://img.stackshare.io/service/1028/ASOhU5xJ.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/docker-compose.yaml + detection_source: docker-compose.yaml + last_updated_by: codecakes + last_updated_on: 2022-07-02 11:19:12.000000000 Z +- name: Docker + description: Enterprise Container Platform for High-Velocity Innovation. + website_url: https://www.docker.com/ + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Build, Test, Deploy + sub_category: Virtual Machine Platforms & Containers + image_url: https://img.stackshare.io/service/586/n4u37v9t_400x400.png + detection_source_url: https://github.com/Xcov19/registrations + detection_source: Repo Metadata +- name: Git + description: Fast, scalable, distributed revision control system + website_url: http://git-scm.com/ + open_source: true + hosted_saas: false + category: Build, Test, Deploy + sub_category: Version Control System + image_url: https://img.stackshare.io/service/1046/git.png + detection_source_url: https://github.com/Xcov19/registrations + detection_source: Repo Metadata +- name: GitHub Actions + description: Automate your workflow from idea to production + website_url: https://github.com/features/actions + open_source: false + hosted_saas: true + category: Build, Test, Deploy + sub_category: Continuous Integration + image_url: https://img.stackshare.io/service/11563/actions.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/.github/workflows/codeql-analysis.yml + detection_source: ".github/workflows/codeql-analysis.yml" + last_updated_by: codecakes + last_updated_on: 2021-08-14 20:23:55.000000000 Z +- name: PyPI + description: A repository of software for the Python programming language + website_url: https://pypi.org/ + open_source: false + hosted_saas: false + category: Build, Test, Deploy + sub_category: Hosted Package Repository + image_url: https://img.stackshare.io/service/12572/-RIWgodF_400x400.jpg + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/pyproject.toml + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-02-13 15:34:38.000000000 Z +- name: Shell + description: A shell is a text-based terminal, used for manipulating programs and + files. Shell scripts typically manage program execution. + website_url: https://en.wikipedia.org/wiki/Shell_script + open_source: false + hosted_saas: false + category: Languages & Frameworks + sub_category: Languages + image_url: https://img.stackshare.io/service/4631/default_c2062d40130562bdc836c13dbca02d318205a962.png + detection_source_url: https://github.com/Xcov19/registrations + detection_source: Repo Metadata +- name: gunicorn + description: WSGI HTTP Server for UNIX + package_url: https://pypi.org/project/gunicorn + version: 20.1.0 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19931/default_74a0c20721d3a0a1484d69586401591fe8993db2.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-02 11:19:12.000000000 Z + vulnerabilities: + - name: Request smuggling leading to endpoint restriction bypass in Gunicorn + cve_id: CVE-2024-1135 + cve_url: https://github.com/advisories/GHSA-w3h3-4rj7-4ph4 + detected_date: Apr 16 + severity: high + first_patched: 22.0.0 +- name: black + description: The uncompromising code formatter + package_url: https://pypi.org/project/black + version: 22.6.0 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20099/default_029b9bbfb6be2cd34bebeda5b8e1e80a1d22441c.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-02 11:19:12.000000000 Z + vulnerabilities: + - name: Black vulnerable to Regular Expression Denial of Service (ReDoS) + cve_id: CVE-2024-21503 + cve_url: https://github.com/advisories/GHSA-fj7x-q9j7-g6q6 + detected_date: Mar 21 + severity: moderate + first_patched: 24.3.0 +- name: pydantic + description: Data validation and settings management using python 3.6 type hinting + package_url: https://pypi.org/project/pydantic + version: 1.9.2 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20022/default_b0d1a54f127d7017fce41c15f5e85568fb7019ed.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-02 11:19:12.000000000 Z + vulnerabilities: + - name: Pydantic regular expression denial of service + cve_id: CVE-2024-3772 + cve_url: https://github.com/advisories/GHSA-mr82-8j83-vxmv + detected_date: Apr 25 + severity: moderate + first_patched: 1.10.13 +- name: pymongo + description: Python driver for MongoDB <http://www.mongodb.org> + package_url: https://pypi.org/project/pymongo + version: 3.12.3 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19865/default_7975a21f3bf03129dc3bc4168cf7cb7ee2cc14cc.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-02-13 15:34:38.000000000 Z + vulnerabilities: + - name: 'PyMongo Out-of-bounds Read in the bson module ' + cve_id: CVE-2024-5629 + cve_url: https://github.com/advisories/GHSA-m87m-mmvp-v9qm + detected_date: Jun 6 + severity: moderate + first_patched: 4.6.3 + - name: 'PyMongo Out-of-bounds Read in the bson module ' + cve_id: + cve_url: https://github.com/advisories/GHSA-cr6f-gf5w-vhrc + detected_date: Apr 9 + severity: moderate + first_patched: 4.6.3 +- name: requests + description: Python HTTP for Humans + package_url: https://pypi.org/project/requests + version: 2.31.0 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19826/default_d7c684bf2673f008a9f02ac93901229297a22d7e.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: dependabot[bot] + last_updated_on: 2023-10-30 21:54:18.000000000 Z + vulnerabilities: + - name: Requests `Session` object does not verify requests after making first request + with verify=False + cve_id: CVE-2024-35195 + cve_url: https://github.com/advisories/GHSA-9wx4-h78v-vm56 + detected_date: May 21 + severity: moderate + first_patched: 2.32.0 +- name: Cython + description: The Cython compiler for writing C extensions for the Python language + package_url: https://pypi.org/project/Cython + version: 0.29.27 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19929/default_74a0c20721d3a0a1484d69586401591fe8993db2.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/pyproject.toml + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-02 11:19:12.000000000 Z +- name: SQLAlchemy + description: Database Abstraction Library + package_url: https://pypi.org/project/SQLAlchemy + version: 1.4.27 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19847/default_db2ab2702f70e20c272f6ce65251108fb2b8f1ea.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/pyproject.toml + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-02-13 15:34:38.000000000 Z +- name: anyio + description: High level compatibility layer for multiple asynchronous event loop + implementations + package_url: https://pypi.org/project/anyio + version: 3.6.1 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20757/default_c1e4fc9b7faffe723aa1e18d3dd3049b39849e4d.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-02 11:19:12.000000000 Z +- name: databases + description: Async database support for Python + package_url: https://pypi.org/project/databases + version: 0.5.5 + license: BSD-3-Clause + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/pypi/image.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-02-13 15:34:38.000000000 Z +- name: email-validator + description: A robust email syntax and deliverability validation library for Python + 2.x/3.x + package_url: https://pypi.org/project/email-validator + version: 1.2.1 + license: Unlicense + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/pypi/image.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-02 11:19:12.000000000 Z +- name: isort + description: A Python utility / library to sort Python imports + package_url: https://pypi.org/project/isort + version: 5.10.1 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20117/default_9cf91bfbbfb266fc12a914cdc09d9e4b55c773bb.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-18 16:47:49.000000000 Z +- name: motor + description: Non-blocking MongoDB driver for Tornado or asyncio + package_url: https://pypi.org/project/motor + version: 2.5.1 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20275/default_267c21fe20acb6a3a56ea60f8b271e1ab445049d.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-02-13 15:34:38.000000000 Z +- name: mypy + description: Optional static typing for Python + package_url: https://pypi.org/project/mypy + version: '0.971' + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20219/default_d4dd0466552a9776ca8535b869e22a3362790c94.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-08-15 18:24:16.000000000 Z +- name: phonenumbers + description: Python version of Google's common library for parsing + package_url: https://pypi.org/project/phonenumbers + version: 8.12.53 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20180/default_cce94831138206ab61e361b18c1d852a1e5ab6a1.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-02 11:19:12.000000000 Z +- name: pre-commit + description: A framework for managing and maintaining multi-language pre-commit + hooks + package_url: https://pypi.org/project/pre-commit + version: 2.20.0 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20560/default_d975dcf643a054134f39226d51d4a5fea9320efe.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-18 16:47:49.000000000 Z +- name: psycopg2-binary + description: Psycopg2 - Python-PostgreSQL Database Adapter + package_url: https://pypi.org/project/psycopg2-binary + version: 2.9.3 + license: BSD-3-Clause-Attribution + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/pypi/image.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-02 11:19:12.000000000 Z +- name: pylint + description: Python code static checker + package_url: https://pypi.org/project/pylint + version: 2.14.5 + license: GPL-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19980/default_a82f3cd9981909e38152c6f66eefe94bed2aa5ca.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-13 14:45:20.000000000 Z +- name: pysqlite3 + description: DB-API 2.0 interface for Sqlite 3.x + package_url: https://pypi.org/project/pysqlite3 + version: 0.4.7 + license: Zlib + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/pypi/image.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-02-13 15:34:38.000000000 Z +- name: pytest + description: 'Pytest: simple powerful testing with Python' + package_url: https://pypi.org/project/pytest + version: 7.1.2 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19843/default_4604ff5dcb7f4d9c7b3833591c2142493951b19c.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-18 16:47:49.000000000 Z +- name: pytest-asyncio + description: Pytest support for asyncio + package_url: https://pypi.org/project/pytest-asyncio + version: 0.19.0 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/pypi/image.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-18 16:47:49.000000000 Z +- name: ujson + description: Ultra fast JSON encoder and decoder for Python + package_url: https://pypi.org/project/ujson + version: 5.4.0 + license: DSDP + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20357/default_1e2908ef2614eb1bb39298a5fc937d8c068f3a2c.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-07-13 14:45:20.000000000 Z +- name: uvloop + description: Fast implementation of asyncio event loop on top of libuv + package_url: https://pypi.org/project/uvloop + version: 0.16.0 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20187/default_c5c395350b07388a35a5e9efffb0ea706d6e196d.png + detection_source_url: https://github.com/Xcov19/registrations/blob/develop/poetry.lock + detection_source: pyproject.toml + last_updated_by: codecakes + last_updated_on: 2022-02-13 15:34:38.000000000 Z