Awesome
toxic-repos
Now you can send information to be added to the list via telegram bot! DarkSider BOT
Also join our telegram chat. There, information about "toxic repositories" appears even faster!
We are against discrediting open source software
What is this?
Recently, cases of adding code of varying degrees of danger to popular Open Source projects have become more frequent. This can pose a threat to people, and also undermines the credibility of the Open Source community and Open Source as such.
:link: Web site | :speech_balloon: Telegram channel | :speech_balloon: Telegram chat | :speech_balloon: Telegram BOT
Statistics
Records in the database: 708
Additionally
Recommendations
- Code isolation in containers, including intermediate code on developers' machines.
- Fork all libraries (if possible) and containers to yourself.
- Mirroring package repositories.
- Inclusion in CI of at least search by keywords, UTF characters with the image of the Ukrainian flag and comparison of the list of files with the whitelist.
- Research on code analysis tools.
- Sending a report according to instructions
Have an idea for improvement?
- You can write to our Telegram chat
- You can write to us at info@toxic-repos.ru
- Submit your pull request.