A demo repository of simple OWASP Top 10 type of vulnerabilities in (mostly) Python. Includes an exploration of GHAS features.
active 2024-06-27 → 2024-09-09 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 75 days from 2024-06-27 to 2024-09-09. Pushes: 4 total, peak 4 in a day. Pull requests: 16 total, peak 10 in a day. Issues: 0 total, peak 0 in a day. Comments: 14 total, peak 9 in a day. Stars: 0 total, peak 0 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| dependabot[bot] | 32 | 3 | 15 | 14 |
| umaranit | 2 | 1 | 1 | 0 |
Recent activity
Latest issues, pull requests and releases
- Pull request#3dependabot[bot]2024-09-09 18:15
- Issue comment#13dependabot[bot]2024-09-09 18:15Bump org.apache.logging.log4j:log4j-api from 2.14.1 to 2.24.0 in /supply-chain/vulnerable-application
- Issue comment#4dependabot[bot]2024-09-09 18:15Bump org.apache.logging.log4j:log4j-core from 2.14.1 to 2.23.1 in /supply-chain/vulnerable-application
- Pull request#13dependabot[bot]2024-09-09 18:15
- Pull request#4dependabot[bot]2024-09-09 18:15
- Issue comment#12dependabot[bot]2024-09-09 18:15Bump org.apache.logging.log4j:log4j-core from 2.14.1 to 2.24.0 in /supply-chain/vulnerable-application
- Pull request#12dependabot[bot]2024-09-09 18:15
- Issue comment#5dependabot[bot]2024-08-26 19:06Bump werkzeug from 2.2.2 to 3.0.3
- Pull request#5dependabot[bot]2024-08-26 19:06
- Issue comment#11dependabot[bot]2024-08-26 19:06Bump werkzeug from 2.2.2 to 3.0.4
- Pull request#11dependabot[bot]2024-08-26 19:06
- Pull request#9umaranit2024-06-27 05:54
- Issue comment#9dependabot[bot]2024-06-27 04:13Bump flask from 3.0.0 to 3.0.3
- Pull request#9dependabot[bot]2024-06-27 04:13
- Issue comment#8dependabot[bot]2024-06-27 04:13Bump requests from 2.25.1 to 2.32.3
- Pull request#8dependabot[bot]2024-06-27 04:13
- Issue comment#7dependabot[bot]2024-06-27 04:13Bump datetime from 4.3 to 5.5
- Pull request#7dependabot[bot]2024-06-27 04:13
- Issue comment#6dependabot[bot]2024-06-27 04:13Bump pysqlite3 from 0.4.6 to 0.5.3
- Pull request#6dependabot[bot]2024-06-27 04:13
- Issue comment#5dependabot[bot]2024-06-27 04:13Bump werkzeug from 2.2.2 to 3.0.3
- Pull request#5dependabot[bot]2024-06-27 04:13
- Issue comment#4dependabot[bot]2024-06-27 04:12Bump org.apache.logging.log4j:log4j-core from 2.14.1 to 2.23.1 in /supply-chain/vulnerable-application
- Pull request#4dependabot[bot]2024-06-27 04:12
- Issue comment#3dependabot[bot]2024-06-27 04:12Bump org.apache.logging.log4j:log4j-api from 2.14.1 to 2.23.1 in /supply-chain/vulnerable-application
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 0 stars here means stars gained during the window, not the repo's star count.