diff --git a/techstack.md b/techstack.md new file mode 100644 index 0000000..1ed2f86 --- /dev/null +++ b/techstack.md @@ -0,0 +1,254 @@ + +
+ +# Tech Stack File +![](https://img.stackshare.io/repo.svg "repo") [drofford/Expert-Python-Programming-Fourth-Edition](https://github.com/drofford/Expert-Python-Programming-Fourth-Edition)![](https://img.stackshare.io/public_badge.svg "public") +

+|40
Tools used|07/26/24
Report generated| +|------|------| +
+ +## Languages (3) + + + + + + + + +
+ C lang +
+ C lang +
+ +		 + C++ +
+ C++ +
+ +		 + Python +
+ Python +
+ +
+ +## Frameworks (1) + + + + +
+ Flask +
+ Flask +
+ v1.1.2 +
+ +## Data (2) + + + + + + +
+ PostgreSQL +
+ PostgreSQL +
+ +		 + Redis +
+ Redis +
+ v3.5.3 +
+ +## DevOps (8) + + + + + + + + + + + + + + + + + + +
+ Docker +
+ Docker +
+ +		 + Git +
+ Git +
+ +		 + OpenTracing +
+ OpenTracing +
+ v2.0.0 +		 + Prometheus +
+ Prometheus +
+ +		 + PyPI +
+ PyPI +
+ +		 + Vagrant +
+ Vagrant +
+ +		 + Zope +
+ Zope +
+ +		 + pytest +
+ pytest +
+ v6.2.2 +
+ +## Other (3) + + + + + + + + +
+ Alpine Linux +
+ Alpine Linux +
+ +		 + IPython +
+ IPython +
+ +		 + Shell +
+ Shell +
+ +
+ + +## Open source packages (23) + +## PyPI (23) + +|NAME|VERSION|LAST UPDATED|LAST UPDATED BY|LICENSE|VULNERABILITIES| +|:------|:------|:------|:------|:------|:------| +|[Werkzeug](https://pypi.org/project/Werkzeug)|v2.0.0|05/24/21|Michał Jaworski |BSD-3-Clause|[CVE-2024-34069](https://github.com/advisories/GHSA-2g68-c3qc-8985) (High)
[CVE-2023-25577](https://github.com/advisories/GHSA-xg9f-g7g7-2323) (High)
[CVE-2023-23934](https://github.com/advisories/GHSA-px8h-6qxv-m22q) (Low)| +|[aiohttp](https://pypi.org/project/aiohttp)|v3.7.3|05/24/21|Michał Jaworski |Apache-2.0|[CVE-2023-49081](https://github.com/advisories/GHSA-q3qx-c6g2-7pw2) (High)
[CVE-2024-30251](https://github.com/advisories/GHSA-5m98-qgg9-wh84) (High)
[CVE-2024-23829](https://github.com/advisories/GHSA-8qpw-xqxj-h4r2) (Moderate)
[CVE-2024-23334](https://github.com/advisories/GHSA-5h86-8mv2-jq9f) (Moderate)
[CVE-2023-47627](https://github.com/advisories/GHSA-gfw2-4jvh-wgfg) (Moderate)
[](https://github.com/advisories/GHSA-pjjw-qhg8-p2p9) (Moderate)
[CVE-2023-49082](https://github.com/advisories/GHSA-qvrw-v9rv-5rjx) (Moderate)
[CVE-2022-33124](https://github.com/advisories/GHSA-rwqr-c348-m5wr) (Moderate)
[CVE-2024-27306](https://github.com/advisories/GHSA-7gpw-8wmc-pm8g) (Moderate)
[CVE-2023-37276](https://github.com/advisories/GHSA-45c4-8wx5-qw6w) (Moderate)
[CVE-2021-21330](https://github.com/advisories/GHSA-v6wp-4m6f-gcjg) (Low)
[CVE-2023-47641](https://github.com/advisories/GHSA-xx9p-xxvh-7g8j) (Low)| +|[gunicorn](https://pypi.org/project/gunicorn)|v20.1.0|05/24/21|Michał Jaworski |MIT|[CVE-2024-1135](https://github.com/advisories/GHSA-w3h3-4rj7-4ph4) (High)| +|[sentry-sdk](https://pypi.org/project/sentry-sdk)|v1.0.0|05/24/21|Michał Jaworski |MIT|[CVE-2023-28117](https://github.com/advisories/GHSA-29pr-6jr8-q5jm) (High)
[CVE-2024-40647](https://github.com/advisories/GHSA-g92j-qhmh-64v2) (Low)| +|[requests](https://pypi.org/project/requests)|v2.25.1|05/24/21|Michał Jaworski |Apache-2.0|[CVE-2024-35195](https://github.com/advisories/GHSA-9wx4-h78v-vm56) (Moderate)
[CVE-2023-32681](https://github.com/advisories/GHSA-j8r2-6x86-q33q) (Moderate)| +|[Cython](https://pypi.org/project/Cython)|v0.29.22|05/24/21|Michał Jaworski |Apache-2.0|N/A| +|[Faker](https://pypi.org/project/Faker)|v6.5.0|05/24/21|Michał Jaworski |MIT|N/A| +|[Flask-Injector](https://pypi.org/project/Flask-Injector)|v0.12.3|05/24/21|Michał Jaworski |BSD-3-Clause|N/A| +|[black](https://pypi.org/project/black)|N/A|05/24/21|Michał Jaworski |MIT|N/A| +|[bleach](https://pypi.org/project/bleach)|v3.3.0|05/24/21|Michał Jaworski |Apache-2.0|N/A| +|[blinker](https://pypi.org/project/blinker)|v1.4|05/24/21|Michał Jaworski |MIT|N/A| +|[coverage](https://pypi.org/project/coverage)|v5.5|05/24/21|Michał Jaworski |Apache-2.0|N/A| +|[falcon](https://pypi.org/project/falcon)|v2.0.0|05/24/21|Michał Jaworski |Apache-2.0|N/A| +|[freezegun](https://pypi.org/project/freezegun)|v1.1.0|05/24/21|Michał Jaworski |Apache-2.0|N/A| +|[hy](https://pypi.org/project/hy)|v0.20.0|05/24/21|Michał Jaworski |Other|N/A| +|[inflection](https://pypi.org/project/inflection)|v0.5.1|05/24/21|Michał Jaworski |MIT|N/A| +|[injector](https://pypi.org/project/injector)|v0.18.4|05/24/21|Michał Jaworski |BSD-3-Clause|N/A| +|[ipdb](https://pypi.org/project/ipdb)|v0.13.4|05/24/21|Michał Jaworski |BSD-3-Clause|N/A| +|[jaeger-client](https://pypi.org/project/jaeger-client)|v4.4.0|05/24/21|Michał Jaworski |Apache-2.0|N/A| +|[mypy](https://pypi.org/project/mypy)|v0.790|05/24/21|Michał Jaworski |MIT|N/A| +|[objgraph](https://pypi.org/project/objgraph)|v3.5.0|05/24/21|Michał Jaworski |MIT|N/A| +|[watchdog](https://pypi.org/project/watchdog)|v0.10.3|11/14/20|Michał Jaworski |Apache-2.0|N/A| +|[zope.interface](https://pypi.org/project/zope.interface)|v5.2.0|05/24/21|Michał Jaworski |ZPL-2.1|N/A| + +
+
+ +Generated via [Stack File](https://github.com/marketplace/stack-file) diff --git a/techstack.yml b/techstack.yml new file mode 100644 index 0000000..cfd85cf --- /dev/null +++ b/techstack.yml @@ -0,0 +1,679 @@ +repo_name: drofford/Expert-Python-Programming-Fourth-Edition +report_id: 9c5a81ea411e0809f5d8e01b5e4cf309 +version: 0.1 +repo_type: Public +timestamp: '2024-07-26T14:15:30+00:00' +requested_by: swistakm +provider: github +branch: main +detected_tools_count: 40 +tools: +- name: C lang + description: One of the most widely used programming languages of all time + website_url: http://en.wikipedia.org/wiki/C_(programming_language) + open_source: true + hosted_saas: false + category: Languages & Frameworks + sub_category: Languages + image_url: https://img.stackshare.io/no-img-open-source.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition + detection_source: Repo Metadata +- name: C++ + description: Has imperative, object-oriented and generic programming features, while + also providing the facilities for low level memory manipulation + website_url: http://www.cplusplus.com/ + open_source: true + hosted_saas: false + category: Languages & Frameworks + sub_category: Languages + image_url: https://img.stackshare.io/service/1049/cplusplus.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition + detection_source: Repo Metadata +- name: Python + description: A clear and powerful object-oriented programming language, comparable + to Perl, Ruby, Scheme, or Java. + website_url: https://www.python.org + open_source: true + hosted_saas: false + category: Languages & Frameworks + sub_category: Languages + image_url: https://img.stackshare.io/service/993/pUBY5pVj.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition + detection_source: Repo Metadata +- name: Flask + description: A microframework for Python based on Werkzeug, Jinja 2 and good intentions + website_url: http://flask.pocoo.org/ + version: 1.1.2 + license: BSD-3-Clause + open_source: true + hosted_saas: false + category: Languages & Frameworks + sub_category: Microframeworks (Backend) + image_url: https://img.stackshare.io/service/1001/default_6d109315b60108628b7cd3e159b84645c31ef0e2.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: Chapter 2/01 - Writing your first Dockerfile/requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2020-11-14 15:24:30.000000000 Z +- name: PostgreSQL + description: A powerful, open source object-relational database system + website_url: http://www.postgresql.org/ + open_source: true + hosted_saas: false + category: Data Stores + sub_category: Databases + image_url: https://img.stackshare.io/service/1028/ASOhU5xJ.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/Chapter + 2/02 - Setting up complex environments/docker-compose.yml + detection_source: Chapter 2/02 - Setting up complex environments/docker-compose.yml + last_updated_by: Michał Jaworski + last_updated_on: 2020-11-14 16:16:25.000000000 Z +- name: Redis + description: Open source (BSD licensed), in-memory data structure store + website_url: http://redis.io/ + version: 3.5.3 + license: BSD-3-Clause + open_source: true + hosted_saas: false + category: Data Stores + sub_category: In-Memory Databases + image_url: https://img.stackshare.io/service/1031/default_cbce472cd134adc6688572f999e9122b9657d4ba.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: Chapter 10/03 - Pytests fixtures/docker-compose.yml + last_updated_by: Michał Jaworski + last_updated_on: 2021-03-06 23:54:00.000000000 Z +- name: Docker + description: Enterprise Container Platform for High-Velocity Innovation. + website_url: https://www.docker.com/ + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Build, Test, Deploy + sub_category: Virtual Machine Platforms & Containers + image_url: https://img.stackshare.io/service/586/n4u37v9t_400x400.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition + detection_source: Repo Metadata +- name: Git + description: Fast, scalable, distributed revision control system + website_url: http://git-scm.com/ + open_source: true + hosted_saas: false + category: Build, Test, Deploy + sub_category: Version Control System + image_url: https://img.stackshare.io/service/1046/git.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition + detection_source: Repo Metadata +- name: OpenTracing + description: Consistent, expressive, vendor-neutral APIs for distributed tracing + and context propagation. + website_url: http://opentracing.io/ + version: 2.0.0 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Monitoring + sub_category: Monitoring Tools + image_url: https://img.stackshare.io/service/6941/ktuguoGc_400x400.jpg + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: Prometheus + description: An open-source service monitoring system and time series database, + developed by SoundCloud + website_url: http://prometheus.io/ + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Monitoring + sub_category: Monitoring Tools + image_url: https://img.stackshare.io/service/2501/default_3cf1b307194b26782be5cb209d30360580ae5b3c.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/Chapter + 12/05 - Using Prometheus/docker-compose.yml + detection_source: Chapter 12/05 - Using Prometheus/docker-compose.yml + last_updated_by: Michał Jaworski + last_updated_on: 2021-04-10 20:01:43.000000000 Z +- name: PyPI + description: A repository of software for the Python programming language + website_url: https://pypi.org/ + open_source: false + hosted_saas: false + category: Build, Test, Deploy + sub_category: Hosted Package Repository + image_url: https://img.stackshare.io/service/12572/-RIWgodF_400x400.jpg + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: Vagrant + description: A tool for building and distributing development environments + website_url: http://www.vagrantup.com/ + license: MIT + open_source: true + hosted_saas: false + category: Build, Test, Deploy + sub_category: Virtual Machine Management + image_url: https://img.stackshare.io/service/768/150px-Vagrant.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/Chapter + 2/08 - Virtual development environments using Vagrant/Vagrantfile + detection_source: Chapter 2/08 - Virtual development environments using Vagrant/Vagrantfile + last_updated_by: Michał Jaworski + last_updated_on: 2020-11-28 01:39:51.000000000 Z +- name: Zope + description: A free and open source web application server written in the object-oriented + programming language “Python” + website_url: https://www.zope.org + open_source: true + hosted_saas: false + category: Application Hosting + sub_category: Web Servers + image_url: https://img.stackshare.io/service/6969/zopeHIres_400x400.jpg + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: pytest + description: A full-featured Python testing tool to help you write better programs + website_url: http://pytest.org/latest/ + version: 6.2.2 + license: MIT + open_source: true + hosted_saas: false + category: Build, Test, Deploy + sub_category: Testing Frameworks + image_url: https://img.stackshare.io/service/4586/Lu99Qe0Z_400x400.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: Alpine Linux + description: Security-oriented, lightweight Linux distribution based on musl libc + and busybox + website_url: https://www.alpinelinux.org/ + open_source: false + hosted_saas: false + category: Languages & Frameworks + sub_category: Operating Systems + image_url: https://img.stackshare.io/service/6429/alpine_linux.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/Chapter + 2/03 - Reducing the size of containers/Dockerfile + detection_source: Chapter 2/03 - Reducing the size of containers/Dockerfile + last_updated_by: Michał Jaworski + last_updated_on: 2021-01-18 06:34:06.000000000 Z +- name: IPython + description: A command shell for interactive computing in multiple programming languages + website_url: http://ipython.org/index.html + open_source: false + hosted_saas: false + category: Languages & Frameworks + sub_category: Shells + image_url: https://img.stackshare.io/service/4477/820a0bb9a44fe5a1d640993ab1e6fd84_400x400.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: Shell + description: A shell is a text-based terminal, used for manipulating programs and + files. Shell scripts typically manage program execution. + website_url: https://en.wikipedia.org/wiki/Shell_script + open_source: false + hosted_saas: false + category: Languages & Frameworks + sub_category: Languages + image_url: https://img.stackshare.io/service/4631/default_c2062d40130562bdc836c13dbca02d318205a962.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition + detection_source: Repo Metadata +- name: Werkzeug + description: The comprehensive WSGI web application library + package_url: https://pypi.org/project/Werkzeug + version: 2.0.0 + license: BSD-3-Clause + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19890/default_87fc2af3f2409064833512bb6fc5b04443a2e6aa.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z + vulnerabilities: + - name: Werkzeug debugger vulnerable to remote execution when interacting with attacker + controlled domain + cve_id: CVE-2024-34069 + cve_url: https://github.com/advisories/GHSA-2g68-c3qc-8985 + detected_date: May 7 + severity: high + first_patched: 3.0.3 + - name: High resource usage when parsing multipart form data with many fields + cve_id: CVE-2023-25577 + cve_url: https://github.com/advisories/GHSA-xg9f-g7g7-2323 + detected_date: Feb 16 + severity: high + first_patched: 2.2.3 + - name: Incorrect parsing of nameless cookies leads to __Host- cookies bypass + cve_id: CVE-2023-23934 + cve_url: https://github.com/advisories/GHSA-px8h-6qxv-m22q + detected_date: Feb 16 + severity: low + first_patched: 2.2.3 +- name: aiohttp + description: Async http client/server framework + package_url: https://pypi.org/project/aiohttp + version: 3.7.3 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19852/default_d748224707283d9d8a73c2323730c87bda6b313a.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z + vulnerabilities: + - name: aiohttp's ClientSession is vulnerable to CRLF injection via version + cve_id: CVE-2023-49081 + cve_url: https://github.com/advisories/GHSA-q3qx-c6g2-7pw2 + detected_date: Nov 28 + severity: high + first_patched: 3.9.0 + - name: aiohttp vulnerable to Denial of Service when trying to parse malformed POST + requests + cve_id: CVE-2024-30251 + cve_url: https://github.com/advisories/GHSA-5m98-qgg9-wh84 + detected_date: May 4 + severity: high + first_patched: 3.9.4 + - name: aiohttp's HTTP parser (the python one, not llhttp) still overly lenient + about separators + cve_id: CVE-2024-23829 + cve_url: https://github.com/advisories/GHSA-8qpw-xqxj-h4r2 + detected_date: Jan 30 + severity: moderate + first_patched: 3.9.2 + - name: aiohttp is vulnerable to directory traversal + cve_id: CVE-2024-23334 + cve_url: https://github.com/advisories/GHSA-5h86-8mv2-jq9f + detected_date: Jan 30 + severity: moderate + first_patched: 3.9.2 + - name: AIOHTTP has problems in HTTP parser (the python one, not llhttp) + cve_id: CVE-2023-47627 + cve_url: https://github.com/advisories/GHSA-gfw2-4jvh-wgfg + detected_date: Nov 15 + severity: moderate + first_patched: 3.8.6 + - name: aiohttp has vulnerable dependency that is vulnerable to request smuggling + cve_id: + cve_url: https://github.com/advisories/GHSA-pjjw-qhg8-p2p9 + detected_date: Nov 29 + severity: moderate + first_patched: 3.8.6 + - name: aiohttp's ClientSession is vulnerable to CRLF injection via method + cve_id: CVE-2023-49082 + cve_url: https://github.com/advisories/GHSA-qvrw-v9rv-5rjx + detected_date: Nov 28 + severity: moderate + first_patched: 3.9.0 + - name: 'Withdrawn: Denial of Service in aiohttp' + cve_id: CVE-2022-33124 + cve_url: https://github.com/advisories/GHSA-rwqr-c348-m5wr + detected_date: Jun 26 + severity: moderate + first_patched: + - name: aiohttp Cross-site Scripting vulnerability on index pages for static file + handling + cve_id: CVE-2024-27306 + cve_url: https://github.com/advisories/GHSA-7gpw-8wmc-pm8g + detected_date: Apr 19 + severity: moderate + first_patched: 3.9.4 + - name: aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp + HTTP request parser + cve_id: CVE-2023-37276 + cve_url: https://github.com/advisories/GHSA-45c4-8wx5-qw6w + detected_date: Jul 21 + severity: moderate + first_patched: 3.8.5 + - name: "`aiohttp` Open Redirect vulnerability (`normalize_path_middleware` middleware)" + cve_id: CVE-2021-21330 + cve_url: https://github.com/advisories/GHSA-v6wp-4m6f-gcjg + detected_date: Aug 22 + severity: low + first_patched: 3.7.4 + - name: Aiohttp has inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` + differing in C and Python fallbacks + cve_id: CVE-2023-47641 + cve_url: https://github.com/advisories/GHSA-xx9p-xxvh-7g8j + detected_date: Nov 15 + severity: low + first_patched: 3.8.0 +- name: gunicorn + description: WSGI HTTP Server for UNIX + package_url: https://pypi.org/project/gunicorn + version: 20.1.0 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19931/default_74a0c20721d3a0a1484d69586401591fe8993db2.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z + vulnerabilities: + - name: Request smuggling leading to endpoint restriction bypass in Gunicorn + cve_id: CVE-2024-1135 + cve_url: https://github.com/advisories/GHSA-w3h3-4rj7-4ph4 + detected_date: Apr 16 + severity: high + first_patched: 22.0.0 +- name: sentry-sdk + description: Python client for Sentry + package_url: https://pypi.org/project/sentry-sdk + version: 1.0.0 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19998/default_b31141ac99e60278dc869f5a0490a63444b590d7.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z + vulnerabilities: + - name: Sentry SDK leaks sensitive session information when `sendDefaultPII` is + set to `True` + cve_id: CVE-2023-28117 + cve_url: https://github.com/advisories/GHSA-29pr-6jr8-q5jm + detected_date: Mar 22 + severity: high + first_patched: 1.14.0 + - name: Sentry's Python SDK unintentionally exposes environment variables to subprocesses + cve_id: CVE-2024-40647 + cve_url: https://github.com/advisories/GHSA-g92j-qhmh-64v2 + detected_date: Jul 19 + severity: low + first_patched: 2.8.0 +- name: requests + description: Python HTTP for Humans + package_url: https://pypi.org/project/requests + version: 2.25.1 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19826/default_d7c684bf2673f008a9f02ac93901229297a22d7e.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z + vulnerabilities: + - name: Requests `Session` object does not verify requests after making first request + with verify=False + cve_id: CVE-2024-35195 + cve_url: https://github.com/advisories/GHSA-9wx4-h78v-vm56 + detected_date: May 21 + severity: moderate + first_patched: 2.32.0 + - name: Unintended leak of Proxy-Authorization header in requests + cve_id: CVE-2023-32681 + cve_url: https://github.com/advisories/GHSA-j8r2-6x86-q33q + detected_date: May 23 + severity: moderate + first_patched: 2.31.0 +- name: Cython + description: The Cython compiler for writing C extensions for the Python language + package_url: https://pypi.org/project/Cython + version: 0.29.22 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19929/default_74a0c20721d3a0a1484d69586401591fe8993db2.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: Faker + description: Faker is a Python package that generates fake data for you + package_url: https://pypi.org/project/Faker + version: 6.5.0 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20068/default_271333e82c8d92d6ae0f197b10a9c1f791d7b37f.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: Flask-Injector + description: Adds Injector + package_url: https://pypi.org/project/Flask-Injector + version: 0.12.3 + license: BSD-3-Clause + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/pypi/image.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: black + description: The uncompromising code formatter + package_url: https://pypi.org/project/black + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20099/default_029b9bbfb6be2cd34bebeda5b8e1e80a1d22441c.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: bleach + description: An easy safelist-based HTML-sanitizing tool + package_url: https://pypi.org/project/bleach + version: 3.3.0 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20045/default_b0b684477aefb2da4c92a4bafd91d26e16511cd1.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: blinker + description: Fast, simple object-to-object and broadcast signaling + package_url: https://pypi.org/project/blinker + version: '1.4' + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20273/default_847617f8273bac4dd5921370b0684f29c3397a68.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: coverage + description: Code coverage measurement for Python + package_url: https://pypi.org/project/coverage + version: '5.5' + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19904/default_1d0eb6da6bdd342bb15f73d8f1721516ebacd1dc.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: falcon + description: An unladen web framework for building APIs and app backends + package_url: https://pypi.org/project/falcon + version: 2.0.0 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20257/default_c011fd31f7e9af58e2e3e8a82a6acdf8662ecdb6.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: freezegun + description: Let your Python tests travel through time + package_url: https://pypi.org/project/freezegun + version: 1.1.0 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20595/default_9322f13ef9811bfc120f244dc670f7e4fb5b8aa3.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: hy + description: Lisp and Python love each other + package_url: https://pypi.org/project/hy + version: 0.20.0 + license: Other + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/pypi/image.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: inflection + description: A port of Ruby on Rails inflector to Python + package_url: https://pypi.org/project/inflection + version: 0.5.1 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19983/default_ccb381b493daf0d966e015380e1894fdbc637ad3.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: injector + description: Injector - Python dependency injection framework + package_url: https://pypi.org/project/injector + version: 0.18.4 + license: BSD-3-Clause + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/pypi/image.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: ipdb + description: IPython-enabled pdb + package_url: https://pypi.org/project/ipdb + version: 0.13.4 + license: BSD-3-Clause + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20411/default_834dddd57f7b1404b19fa6cd08f22a7da3156be5.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: jaeger-client + description: Jaeger Python OpenTracing Tracer implementation + package_url: https://pypi.org/project/jaeger-client + version: 4.4.0 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/pypi/image.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: mypy + description: Optional static typing for Python + package_url: https://pypi.org/project/mypy + version: '0.790' + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/20219/default_d4dd0466552a9776ca8535b869e22a3362790c94.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: objgraph + description: Draws Python object reference graphs with graphviz + package_url: https://pypi.org/project/objgraph + version: 3.5.0 + license: MIT + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/pypi/image.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z +- name: watchdog + description: Filesystem events monitoring + package_url: https://pypi.org/project/watchdog + version: 0.10.3 + license: Apache-2.0 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19927/default_bb29140b72c0fb9789e567bba0ef0ffadeaef5d4.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/Chapter + 2/07 - Adding live reload for absolutely any code/requirements.txt + detection_source: Chapter 2/07 - Adding live reload for absolutely any code/requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2020-11-14 20:48:26.000000000 Z +- name: zope.interface + description: Interfaces for Python + package_url: https://pypi.org/project/zope.interface + version: 5.2.0 + license: ZPL-2.1 + open_source: true + hosted_saas: false + category: Libraries + sub_category: PyPI Packages + image_url: https://img.stackshare.io/package/19905/default_3846e1a96a2a21d085febee35b98cbcb22994ee7.png + detection_source_url: https://github.com/drofford/Expert-Python-Programming-Fourth-Edition/blob/main/requirements.txt + detection_source: requirements.txt + last_updated_by: Michał Jaworski + last_updated_on: 2021-05-24 00:53:26.000000000 Z