Package Health Score

57 / 100

security
No known security issues
popularity
Small
maintenance
Inactive
community
Active

Explore Similar Packages

Popularity

Small

GitHub Stars: 3.15K
Forks: 953
Contributors: 20

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package cobrad, we found that it has been starred 3,152 times.

Security

No known security issues

Security and license risk for latest version

Release Date: Aug 9, 2016
Direct Vulnerabilities: 0
C
0
H
0
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
0
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

MIT

Security Policy

We found a way for you to contribute to the project! Looks like cobrad is missing a security policy.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Keep your project free of vulnerabilities with Snyk

Maintenance

Inactive

archived

Commit Frequency

No Recent Commits

Open Issues: 64
Open PR: 17
Last Release: 8 years ago
Last Commit: 4 years ago

Further analysis of the maintenance status of cobrad based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for cobrad is that it hasn't seen any new versions released to PyPI in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

In the past month we didn't find any pull request activity or change in issues status has been detected for the GitHub repository.

Community

Active

Readme: Yes
Contributing.md: Yes
Code of Conduct: Yes
Contributors: 20
Funding: No

With more than 10 contributors for the cobrad repository, this is possibly a sign for a growing and inviting community.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: ==2.6.*, ==2.7.*, ==3.3.*, ==3.4.*, ==3.5.*

Age: 8 years
Latest Release: 8 years ago
Dependencies: N/A
Versions: 1
Maintainers: 1
Wheels: No

Readme

Cobra

Static code analysis common security issues and scan common security vulnerabilities

项目介绍

眼镜蛇(Cobra)是一款定位于静态代码安全分析的工具，目标是为了找出源代码中存在的安全隐患或者漏洞。

目标用户

1. 互联网企业

互联网公司可以将Cobra部署在企业内,供开发人员使用,用来扫描项目风险. 也可以集成到内部的代码发布系统,让Cobra成为发布系统中的一环,扫描开发人员提交到线上的代码的安全性,从而限制不安全的代码上线,减少线上风险.

2. 安全公司

安全公司为互联网公司进行安全测试时,可以通过Cobra的全局项目扫描功能对甲方的所有项目进行自动代码安全审计.

3. 白帽

白帽们可以通过定制完善Cobra扫描规则, 对开源项目进行代码审计,发现其中漏洞.

应用场景

1.漏洞出现前（检测）

我们将互联网上常见的漏洞梳理为Cobra的检测规则，能够在漏洞被白帽子发现前就扫描出风险点并解决，防范于未然。

例：提前检测代码中是否存在高危文件(.tar.gz/.rar/.bak/.swp)，可以避免高危文件被下载。

2.漏洞出现中（扫描）

当企业收到白帽子提交的漏洞后，企业会在第一时间修复漏洞，并可以通过Cobra来添加扫描规则检测企业的所有项目是否存在类似漏洞。

例：出现了ImageMagick漏洞后，可以通过Cobra设置扫描规则对历史所有项目进行快速扫描，几分钟内就能知道企业数十个项目中哪些有用到ImageMagick组件，哪些存在漏洞，哪些可以免疫。

3.漏洞出现后（限制）

当企业修复漏洞后，可以通过设置修复/验证规则来限制以后所有提交的代码都需要过修复/验证规则，否则不予上线，减少相同漏洞再次出现的可能性。

项目截图

https://raw.githubusercontent.com/wufeifei/cobra/master/doc/MANUAL.png

https://raw.githubusercontent.com/wufeifei/cobra/master/doc/REPORT.png

https://raw.githubusercontent.com/wufeifei/cobra/master/doc/MANAGE.png

引用链接

Github: https://github.com/wufeifei/cobra
Documents: https://github.com/wufeifei/cobra/wiki

FAQs

What is cobrad?

Code Security Scan System. Visit Snyk Advisor to see a full health score report for cobrad, including popularity, security, maintenance & community analysis.

Is cobrad popular?

The python package cobrad receives a total of 7 weekly downloads. As such, cobrad popularity was classified as small. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is cobrad well maintained?

We found indications that cobrad is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is cobrad safe to use?

The python package cobrad was scanned for known vulnerabilities and missing license, and no issues were found. Thus the package was deemed as safe to use. See the full health analysis review.

Last updated on 6 December-2024, at 06:19 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

cobrad

Code Security Scan System For more information about how to use this package see README

Ensure you're using the healthiest python packages

Package Health Score

Explore Similar Packages

Popularity

Direct Usage Popularity

Security

Security and license risk for latest version

Maintenance

Commit Frequency

Community

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Package

Readme

Cobra

项目介绍

目标用户

应用场景

项目截图

引用链接

FAQs

What is cobrad?

Is cobrad popular?

Is cobrad well maintained?

Is cobrad safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Fix identified vulnerabilities

Monitor for new issues

Package Health Score

Explore Similar Packages

Direct Usage Popularity

Security and license risk for latest version

Commit Frequency

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Readme

Cobra

项目介绍

目标用户

应用场景

项目截图

引用链接

FAQs

What is cobrad?

Is cobrad popular?

Is cobrad well maintained?

Is cobrad safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues