From f2eacc50f33d4c5628bafd79e881b70d46ccbc57 Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Thu, 9 Nov 2023 16:24:00 +0000 Subject: [PATCH 1/2] Create techstack.yml --- techstack.yml | 86 +++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 86 insertions(+) create mode 100644 techstack.yml diff --git a/techstack.yml b/techstack.yml new file mode 100644 index 0000000..7d222c9 --- /dev/null +++ b/techstack.yml @@ -0,0 +1,86 @@ +repo_name: locusrobotics/copyrightify +report_id: 4365916e234e6179f11ee50c5470eec5 +repo_type: Public +timestamp: '2023-11-09T16:23:58+00:00' +requested_by: paulbovbel +provider: github +branch: master +detected_tools_count: 5 +tools: +- name: Jinja + description: Full featured template engine for Python + website_url: https://palletsprojects.com/p/jinja/ + license: BSD-3-Clause + open_source: true + hosted_saas: false + category: Languages & Frameworks + sub_category: Templating Languages & Extensions + image_url: https://img.stackshare.io/service/2303/New_Project__20_.png + detection_source: setup.py + last_updated_by: Paul Bovbel + last_updated_on: 2017-12-13 16:38:11.000000000 Z +- name: Python + description: A clear and powerful object-oriented programming language, comparable + to Perl, Ruby, Scheme, or Java. + website_url: https://www.python.org + open_source: true + hosted_saas: false + category: Languages & Frameworks + sub_category: Languages + image_url: https://img.stackshare.io/service/993/pUBY5pVj.png + detection_source: Repo Metadata +- name: Git + description: Fast, scalable, distributed revision control system + website_url: http://git-scm.com/ + open_source: true + hosted_saas: false + category: Build, Test, Deploy + sub_category: Version Control System + image_url: https://img.stackshare.io/service/1046/git.png + detection_source: Repo Metadata +- name: PyPI + description: A repository of software for the Python programming language + website_url: https://pypi.org/ + open_source: false + hosted_saas: false + category: Build, Test, Deploy + sub_category: Hosted Package Repository + image_url: https://img.stackshare.io/service/12572/-RIWgodF_400x400.jpg + detection_source: setup.py + last_updated_by: Paul Bovbel + last_updated_on: 2017-08-18 00:52:59.000000000 Z +- name: GitPython + description: Python Git Library + package_url: https://pypi.org/GitPython + version: '2.1' + license: BSD-3-Clause + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19867/default_bd86f80ade48cfe191d5781a2efa0e66fa22163a.png + detection_source_url: setup.py + detection_source: setup.py + last_updated_by: Paul Bovbel + last_updated_on: 2017-12-13 16:38:11.000000000 Z + vulnerabilities: + - name: GitPython vulnerable to remote code execution due to insufficient sanitization + of input arguments + cve_id: CVE-2023-40267 + cve_url: https://github.com/advisories/GHSA-pr76-5cm5-w9cj + detected_date: Aug 12 + severity: critical + first_patched: 3.1.32 + - name: GitPython vulnerable to Remote Code Execution due to improper user input + validation + cve_id: CVE-2022-24439 + cve_url: https://github.com/advisories/GHSA-hcpj-qp55-gfph + detected_date: Dec 7 + severity: high + first_patched: 3.1.30 + - name: Blind local file inclusion + cve_id: CVE-2023-41040 + cve_url: https://github.com/advisories/GHSA-cwvm-v4w8-q58c + detected_date: Sep 7 + severity: moderate + first_patched: 3.1.37 From d46f07f055ae7a53b66858d23c53c8e7864ff9fa Mon Sep 17 00:00:00 2001 From: stacksharebot Date: Thu, 9 Nov 2023 16:24:01 +0000 Subject: [PATCH 2/2] Create techstack.md --- techstack.md | 83 ++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 83 insertions(+) create mode 100644 techstack.md diff --git a/techstack.md b/techstack.md new file mode 100644 index 0000000..21a754c --- /dev/null +++ b/techstack.md @@ -0,0 +1,83 @@ + +
+ +# Tech Stack File +![](https://img.stackshare.io/repo.svg "repo") [locusrobotics/copyrightify](https://github.com/locusrobotics/copyrightify)![](https://img.stackshare.io/public_badge.svg "public") +

+|5
Tools used|11/09/23
Report generated| +|------|------| +
+ +## Languages (2) + + + + + + +
+ Jinja +
+ Jinja +
+ +		 + Python +
+ Python +
+ +
+ +## DevOps (2) + + + + + + +
+ Git +
+ Git +
+ +		 + PyPI +
+ PyPI +
+ +
+ + +## Open source packages (1) + +## PyPI (1) + +|NAME|VERSION|LAST UPDATED|LAST UPDATED BY|LICENSE|VULNERABILITIES| +|:------|:------|:------|:------|:------|:------| +|[GitPython](https://pypi.org/GitPython)|v2.1|12/13/17|Paul Bovbel |BSD-3-Clause|[CVE-2023-40267](https://github.com/advisories/GHSA-pr76-5cm5-w9cj) (Critical)
[CVE-2022-24439](https://github.com/advisories/GHSA-hcpj-qp55-gfph) (High)
[CVE-2023-41040](https://github.com/advisories/GHSA-cwvm-v4w8-q58c) (Moderate)| + +
+
+ +Generated via [Stack File](https://github.com/apps/stack-file)