Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
126 changes: 126 additions & 0 deletions techstack.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,126 @@
<!--
&lt;--- Readme.md Snippet without images Start ---&gt;
## Tech Stack
highlanderkev/ibm-lab3-template-django-bootstrap is built on the following main stack:

- [JavaScript](https://developer.mozilla.org/en-US/docs/Web/JavaScript) – Languages
- [Jinja](https://palletsprojects.com/p/jinja/) – Templating Languages & Extensions
- [Python](https://www.python.org) – Languages
- [Pillow](https://python-pillow.github.io/) – Image Processing and Management

Full tech stack [here](/techstack.md)

&lt;--- Readme.md Snippet without images End ---&gt;

&lt;--- Readme.md Snippet with images Start ---&gt;
## Tech Stack
highlanderkev/ibm-lab3-template-django-bootstrap is built on the following main stack:

- <img width='25' height='25' src='https://img.stackshare.io/service/1209/javascript.jpeg' alt='JavaScript'/> [JavaScript](https://developer.mozilla.org/en-US/docs/Web/JavaScript) – Languages
- <img width='25' height='25' src='https://img.stackshare.io/service/2303/New_Project__20_.png' alt='Jinja'/> [Jinja](https://palletsprojects.com/p/jinja/) – Templating Languages & Extensions
- <img width='25' height='25' src='https://img.stackshare.io/service/993/pUBY5pVj.png' alt='Python'/> [Python](https://www.python.org) – Languages
- <img width='25' height='25' src='https://img.stackshare.io/service/2375/default_1f67b0ca7416a9f52beb655f90b5602d5ef74b75.jpg' alt='Pillow'/> [Pillow](https://python-pillow.github.io/) – Image Processing and Management

Full tech stack [here](/techstack.md)

&lt;--- Readme.md Snippet with images End ---&gt;
-->
<div align="center">

# Tech Stack File
![](https://img.stackshare.io/repo.svg "repo") [highlanderkev/ibm-lab3-template-django-bootstrap](https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap)![](https://img.stackshare.io/public_badge.svg "public")
<br/><br/>
|14<br/>Tools used|02/29/24 <br/>Report generated|
|------|------|
</div>

## <img src='https://img.stackshare.io/languages.svg'/> Languages (4)
<table><tr>
<td align='center'>
<img width='36' height='36' src='https://img.stackshare.io/service/6727/css.png' alt='CSS 3'>
<br>
<sub><a href="https://developer.mozilla.org/en-US/docs/Web/CSS/CSS3">CSS 3</a></sub>
<br>
<sub></sub>
</td>

<td align='center'>
<img width='36' height='36' src='https://img.stackshare.io/service/1209/javascript.jpeg' alt='JavaScript'>
<br>
<sub><a href="https://developer.mozilla.org/en-US/docs/Web/JavaScript">JavaScript</a></sub>
<br>
<sub></sub>
</td>

<td align='center'>
<img width='36' height='36' src='https://img.stackshare.io/service/2303/New_Project__20_.png' alt='Jinja'>
<br>
<sub><a href="https://palletsprojects.com/p/jinja/">Jinja</a></sub>
<br>
<sub>v3.0</sub>
</td>

<td align='center'>
<img width='36' height='36' src='https://img.stackshare.io/service/993/pUBY5pVj.png' alt='Python'>
<br>
<sub><a href="https://www.python.org">Python</a></sub>
<br>
<sub></sub>
</td>

</tr>
</table>

## <img src='https://img.stackshare.io/devops.svg'/> DevOps (2)
<table><tr>
<td align='center'>
<img width='36' height='36' src='https://img.stackshare.io/service/1046/git.png' alt='Git'>
<br>
<sub><a href="http://git-scm.com/">Git</a></sub>
<br>
<sub></sub>
</td>

<td align='center'>
<img width='36' height='36' src='https://img.stackshare.io/service/12572/-RIWgodF_400x400.jpg' alt='PyPI'>
<br>
<sub><a href="https://pypi.org/">PyPI</a></sub>
<br>
<sub></sub>
</td>

</tr>
</table>

## <img src='https://img.stackshare.io/saas.svg'/> Software as a Service (SaaS) (1)
<table><tr>
<td align='center'>
<img width='36' height='36' src='https://img.stackshare.io/service/2375/default_1f67b0ca7416a9f52beb655f90b5602d5ef74b75.jpg' alt='Pillow'>
<br>
<sub><a href="https://python-pillow.github.io/">Pillow</a></sub>
<br>
<sub></sub>
</td>

</tr>
</table>


## <img src='https://img.stackshare.io/group.svg' /> Open source packages (7)</h2>

## <img width='24' height='24' src='https://img.stackshare.io/service/12572/-RIWgodF_400x400.jpg'/> PyPI (7)

|NAME|VERSION|LAST UPDATED|LAST UPDATED BY|LICENSE|VULNERABILITIES|
|:------|:------|:------|:------|:------|:------|
|[Django](https://pypi.org/project/Django)|v3.1.3|11/13/23|Kevin Westropp |BSD-3-Clause|[CVE-2021-35042](https://github.com/advisories/GHSA-xpfp-f569-q3p2) (Critical)<br/>[CVE-2021-44420](https://github.com/advisories/GHSA-v6rh-hp5x-86rv) (High)<br/>[CVE-2021-31542](https://github.com/advisories/GHSA-rxjp-mfm9-w4wr) (High)<br/>[CVE-2021-28658](https://github.com/advisories/GHSA-xgxc-v2qg-chmh) (Moderate)<br/>[CVE-2021-32052](https://github.com/advisories/GHSA-qm57-vhq3-3fwf) (Moderate)|
|[aiohttp](https://pypi.org/project/aiohttp)|v3.8.3|11/13/23|Kevin Westropp |Apache-2.0|[CVE-2023-49081](https://github.com/advisories/GHSA-q3qx-c6g2-7pw2) (High)<br/>[CVE-2024-23334](https://github.com/advisories/GHSA-5h86-8mv2-jq9f) (Moderate)<br/>[CVE-2023-47627](https://github.com/advisories/GHSA-gfw2-4jvh-wgfg) (Moderate)<br/>[](https://github.com/advisories/GHSA-pjjw-qhg8-p2p9) (Moderate)<br/>[CVE-2023-49082](https://github.com/advisories/GHSA-qvrw-v9rv-5rjx) (Moderate)<br/>[CVE-2023-37276](https://github.com/advisories/GHSA-45c4-8wx5-qw6w) (Moderate)<br/>[CVE-2024-23829](https://github.com/advisories/GHSA-8qpw-xqxj-h4r2) (Moderate)|
|[click](https://pypi.org/project/click)|v8.0.4|11/13/23|Kevin Westropp |BSD-3-Clause|N/A|
|[gunicorn](https://pypi.org/project/gunicorn)|v20.1.0|11/13/23|Kevin Westropp |MIT|N/A|
|[multidict](https://pypi.org/project/multidict)|v4.5|11/13/23|Kevin Westropp |Apache-2.0|N/A|
|[typing-extensions](https://pypi.org/project/typing-extensions)|v4.2.0|11/13/23|Kevin Westropp |Python-2.0|N/A|
|[wheel](https://pypi.org/project/wheel)|v0.41.1|11/13/23|Kevin Westropp |MIT|N/A|

<br/>
<div align='center'>

Generated via [Stack File](https://github.com/marketplace/stack-file)
265 changes: 265 additions & 0 deletions techstack.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,265 @@
repo_name: highlanderkev/ibm-lab3-template-django-bootstrap
report_id: c859266dd76457b66556ce0a2d893a15
version: 0.1
repo_type: Public
timestamp: '2024-02-29T19:47:22+00:00'
requested_by: highlanderkev
provider: github
branch: main
detected_tools_count: 14
tools:
- name: CSS 3
description: The latest evolution of the Cascading Style Sheets language
website_url: https://developer.mozilla.org/en-US/docs/Web/CSS/CSS3
open_source: true
hosted_saas: false
category: Languages & Frameworks
sub_category: Languages
image_url: https://img.stackshare.io/service/6727/css.png
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap
detection_source: Repo Metadata
- name: JavaScript
description: Lightweight, interpreted, object-oriented language with first-class
functions
website_url: https://developer.mozilla.org/en-US/docs/Web/JavaScript
open_source: true
hosted_saas: false
category: Languages & Frameworks
sub_category: Languages
image_url: https://img.stackshare.io/service/1209/javascript.jpeg
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap
detection_source: Repo Metadata
- name: Jinja
description: Full featured template engine for Python
website_url: https://palletsprojects.com/p/jinja/
version: '3.0'
license: BSD-3-Clause
open_source: true
hosted_saas: false
category: Languages & Frameworks
sub_category: Templating Languages & Extensions
image_url: https://img.stackshare.io/service/2303/New_Project__20_.png
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap/blob/main/requirements.txt
detection_source: requirements.txt
last_updated_by: Kevin Westropp
last_updated_on: 2023-11-13 05:03:37.000000000 Z
- name: Python
description: A clear and powerful object-oriented programming language, comparable
to Perl, Ruby, Scheme, or Java.
website_url: https://www.python.org
open_source: true
hosted_saas: false
category: Languages & Frameworks
sub_category: Languages
image_url: https://img.stackshare.io/service/993/pUBY5pVj.png
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap
detection_source: Repo Metadata
- name: Git
description: Fast, scalable, distributed revision control system
website_url: http://git-scm.com/
open_source: true
hosted_saas: false
category: Build, Test, Deploy
sub_category: Version Control System
image_url: https://img.stackshare.io/service/1046/git.png
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap
detection_source: Repo Metadata
- name: PyPI
description: A repository of software for the Python programming language
website_url: https://pypi.org/
open_source: false
hosted_saas: false
category: Build, Test, Deploy
sub_category: Hosted Package Repository
image_url: https://img.stackshare.io/service/12572/-RIWgodF_400x400.jpg
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap/blob/main/requirements.txt
detection_source: requirements.txt
last_updated_by: Kevin Westropp
last_updated_on: 2023-11-13 05:03:37.000000000 Z
- name: Pillow
description: Python Imaging Library
website_url: https://python-pillow.github.io/
open_source: true
hosted_saas: false
category: Assets and Media
sub_category: Image Processing and Management
image_url: https://img.stackshare.io/service/2375/default_1f67b0ca7416a9f52beb655f90b5602d5ef74b75.jpg
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap/blob/main/requirements.txt
detection_source: requirements.txt
last_updated_by: Kevin Westropp
last_updated_on: 2023-11-13 05:03:37.000000000 Z
- name: Django
description: A high-level Python Web framework that encourages rapid development
and clean
package_url: https://pypi.org/project/Django
version: 3.1.3
license: BSD-3-Clause
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/19832/default_58dbe7b4d7ec447b62773209af0f9a31bbabf5bd.png
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap/blob/main/requirements.txt
detection_source: requirements.txt
last_updated_by: Kevin Westropp
last_updated_on: 2023-11-13 05:03:37.000000000 Z
vulnerabilities:
- name: SQL Injection in Django
cve_id: CVE-2021-35042
cve_url: https://github.com/advisories/GHSA-xpfp-f569-q3p2
detected_date: Sep 23
severity: critical
first_patched: 3.1.13
- name: Potential bypass of an upstream access control based on URL paths in Django
cve_id: CVE-2021-44420
cve_url: https://github.com/advisories/GHSA-v6rh-hp5x-86rv
detected_date: Dec 14
severity: high
first_patched: 3.1.14
- name: Path Traversal in Django
cve_id: CVE-2021-31542
cve_url: https://github.com/advisories/GHSA-rxjp-mfm9-w4wr
detected_date: Aug 22
severity: high
first_patched: 3.1.9
- name: Directory Traversal in Django
cve_id: CVE-2021-28658
cve_url: https://github.com/advisories/GHSA-xgxc-v2qg-chmh
detected_date: Aug 22
severity: moderate
first_patched: 3.1.8
- name: Header injection possible in Django
cve_id: CVE-2021-32052
cve_url: https://github.com/advisories/GHSA-qm57-vhq3-3fwf
detected_date: Aug 22
severity: moderate
first_patched: 3.1.10
- name: aiohttp
description: Async http client/server framework
package_url: https://pypi.org/project/aiohttp
version: 3.8.3
license: Apache-2.0
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/19852/default_d748224707283d9d8a73c2323730c87bda6b313a.png
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap/blob/main/requirements.txt
detection_source: requirements.txt
last_updated_by: Kevin Westropp
last_updated_on: 2023-11-13 05:03:37.000000000 Z
vulnerabilities:
- name: aiohttp's ClientSession is vulnerable to CRLF injection via version
cve_id: CVE-2023-49081
cve_url: https://github.com/advisories/GHSA-q3qx-c6g2-7pw2
detected_date: Nov 28
severity: high
first_patched: 3.9.0
- name: aiohttp is vulnerable to directory traversal
cve_id: CVE-2024-23334
cve_url: https://github.com/advisories/GHSA-5h86-8mv2-jq9f
detected_date: Jan 30
severity: moderate
first_patched: 3.9.2
- name: AIOHTTP has problems in HTTP parser (the python one, not llhttp)
cve_id: CVE-2023-47627
cve_url: https://github.com/advisories/GHSA-gfw2-4jvh-wgfg
detected_date: Nov 15
severity: moderate
first_patched: 3.8.6
- name: aiohttp has vulnerable dependency that is vulnerable to request smuggling
cve_id:
cve_url: https://github.com/advisories/GHSA-pjjw-qhg8-p2p9
detected_date: Nov 29
severity: moderate
first_patched: 3.8.6
- name: aiohttp's ClientSession is vulnerable to CRLF injection via method
cve_id: CVE-2023-49082
cve_url: https://github.com/advisories/GHSA-qvrw-v9rv-5rjx
detected_date: Nov 28
severity: moderate
first_patched: 3.9.0
- name: aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp
HTTP request parser
cve_id: CVE-2023-37276
cve_url: https://github.com/advisories/GHSA-45c4-8wx5-qw6w
detected_date: Jul 21
severity: moderate
first_patched: 3.8.5
- name: aiohttp's HTTP parser (the python one, not llhttp) still overly lenient
about separators
cve_id: CVE-2024-23829
cve_url: https://github.com/advisories/GHSA-8qpw-xqxj-h4r2
detected_date: Jan 30
severity: moderate
first_patched: 3.9.2
- name: click
description: Composable command line interface toolkit
package_url: https://pypi.org/project/click
version: 8.0.4
license: BSD-3-Clause
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/19830/default_74a61b43bdb9fc0cba2978316b9976f43545029b.png
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap/blob/main/requirements.txt
detection_source: requirements.txt
last_updated_by: Kevin Westropp
last_updated_on: 2023-11-13 05:03:37.000000000 Z
- name: gunicorn
description: WSGI HTTP Server for UNIX
package_url: https://pypi.org/project/gunicorn
version: 20.1.0
license: MIT
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/19931/default_74a0c20721d3a0a1484d69586401591fe8993db2.png
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap/blob/main/requirements.txt
detection_source: requirements.txt
last_updated_by: Kevin Westropp
last_updated_on: 2023-11-13 05:03:37.000000000 Z
- name: multidict
description: Multidict implementation
package_url: https://pypi.org/project/multidict
version: '4.5'
license: Apache-2.0
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/20160/default_8822b1755ae0c97a622ebcb1aa9cafa328004f81.png
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap/blob/main/requirements.txt
detection_source: requirements.txt
last_updated_by: Kevin Westropp
last_updated_on: 2023-11-13 05:03:37.000000000 Z
- name: typing-extensions
description: Backported and Experimental Type Hints for Python 3.5+
package_url: https://pypi.org/project/typing-extensions
version: 4.2.0
license: Python-2.0
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/19875/default_2270bfab784e3d2c2d999d26b11ee478a9dad238.png
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap/blob/main/requirements.txt
detection_source: requirements.txt
last_updated_by: Kevin Westropp
last_updated_on: 2023-11-13 05:03:37.000000000 Z
- name: wheel
description: A built-package format for Python
package_url: https://pypi.org/project/wheel
version: 0.41.1
license: MIT
open_source: true
hosted_saas: false
category: Libraries
sub_category: PyPI Packages
image_url: https://img.stackshare.io/package/19889/default_7182952cb92ae36151a754e2592ac68e6e6340df.png
detection_source_url: https://github.com/highlanderkev/ibm-lab3-template-django-bootstrap/blob/main/requirements.txt
detection_source: requirements.txt
last_updated_by: Kevin Westropp
last_updated_on: 2023-11-13 05:03:37.000000000 Z