Science Score: 26.0%
This score indicates how likely this project is to be science-related based on various indicators:
-
○CITATION.cff file
-
✓codemeta.json file
Found codemeta.json file -
✓.zenodo.json file
Found .zenodo.json file -
○DOI references
-
○Academic publication links
-
○Academic email domains
-
○Institutional organization owner
-
○JOSS paper metadata
-
○Scientific vocabulary similarity
Low similarity (3.4%) to scientific vocabulary
Last synced: 10 months ago
·
JSON representation
Repository
nothing to do
Basic Info
- Host: GitHub
- Owner: RON4589iN
- License: mit
- Language: Jupyter Notebook
- Default Branch: main
- Size: 224 MB
Statistics
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
- Releases: 0
Created over 1 year ago
· Last pushed 10 months ago
Metadata Files
Readme
Changelog
Contributing
Funding
License
Code of conduct
Citation
Codeowners
Security
Support
Governance
Authors
Notice
Copyright
Dco
README-ar.md
English | | | Azrbaycan | | | Catal | etina | Deutsch | | Espaol | | Franais | | Indonesia | Italiano | | | | | | | Nederlands | Polski | Portugus (Brasil) | | | Trke | | Ting Vit
# API Security Checklist
API
---
## (Authentication)
- [ ] `Basic Auth` ( [JWT](https://jwt.io/), [OAuth](https://oauth.net/)).
- [ ] `` ` ` ` `. .
- [ ] ` ` ` jail feature` .
- [ ] .
### JSON Web Token) JWT)
- [ ] (`JWT Secret`) brute forcing .
- [ ] JWT. (`HS256` `RS256`).
- [ ] (`TTL`, `RTTL`) .
- [ ] JWT, [easily](https://jwt.io/#debugger-io).
- [ ] . JWT .
##
- [ ] (Throttling) DDoS brute-force.
- [ ] HTTPS MITM (Man In The Middle Attack).
- [ ] `HSTS` header SSL SSL Strip.
- [ ] .
- [ ] IP .
## Authorization
### OAuth
- [ ] `redirect_uri` .
- [ ] ( `response_type=token`).
- [ ] `state` CSRF OAuth.
- [ ] scope .
##
- [ ] HTTP method : `GET ()`, `POST ( )`, `PUT/PATCH ( )`, and `DELETE ( )`, `405 Method Not Allowed` method .
- [ ] `content-type` reuest header (Content Negotiation) ( `application/xml`, `application/json`, ) `406 Not Acceptable` .
- [ ] `content-type` posted data ( `application/x-www-form-urlencoded`, `multipart/form-data`, `application/json`, ).
- [ ] ( `XSS`, `SQL-Injection`, `Remote Code Execution`, ).
- [ ] (`credentials`, `Passwords`, `security tokens`, `API keys`) Authorization header.
- [ ] .
- [ ] API caching Rate Limit policies ( ` Quota`, ` Spike Arrest`, ` Concurrent Rate Limit`)
##
- [ ] authentication broken authentication.
- [ ] . `/me/orders` `/user/654321/orders`.
- [ ] auto-increment. `UUID` .
- [ ] XML, entity parsing `XXE` (XML external entity).
- [ ] XML, entity expansion `Billion Laughs/XML bomb` exponential entity expansion.
- [ ] CDN .
- [ ] Workers, Queues HTTP Blocking.
- [ ] DEBUG mode .
- [ ] .
##
- [ ] `X-Content-Type-Options: nosniff` header.
- [ ] `X-Frame-Options: deny` header.
- [ ] `Content-Security-Policy: default-src 'none'` header.
- [ ] headers - `X-Powered-By`, `Server`, `X-AspNet-Version` .
- [ ] `content-type` `application/json` `content-type` `application/json`.
- [ ] `credentials`, `Passwords`, `security tokens`.
- [ ] status code . ( `200 OK`, `400 Bad Request`, `401 Unauthorized`, `405 Method Not Allowed`, ).
## CI & CD
- [ ] / unit/integration tests coverage.
- [ ] .
- [ ] .
- [ ] ( /) .
- [ ] ( ) .
- [ ] rollback.
## Monitoring
- [ ] Use centralized logins for all services and components.
- [ ] Use agents to monitor all traffic, errors, requests, and responses.
- [ ] Use alerts for SMS, Slack, Email, Telegram, Kibana, Cloudwatch, etc.
- [ ] Ensure that you aren't logging any sensitive data like credit cards, passwords, PINs, etc.
- [ ] Use an IDS and/or IPS system to monitor your API requests and instances.
---
## :
- [yosriady/api-development-tools](https://github.com/yosriady/api-development-tools) - RESTful HTTP+JSON APIs.
---
#
fork pull request. `team@shieldfy.io`.
Owner
- Login: RON4589iN
- Kind: user
- Repositories: 1
- Profile: https://github.com/RON4589iN
Dependencies
.github/workflows/ci-plus.yml
actions
- actions/checkout v3 composite
- actions/setup-python v4 composite
Cargo.toml
cargo
Dockerfile
docker
- python latest build
FSH.StarterKit.nuspec
nuget
Gemfile
rubygems
- github-pages >= 0
Cargo.lock
cargo
- 126 dependencies
DESCRIPTION
cran
- base64enc * imports
- glue * imports
- googleAuthR * imports
- jsonlite * imports
- tibble * imports
AWS_EC2/requirements.txt
pypi
- awscli *
- boto3 ==1.10.50
- pandas *
- plotly *
Gemfile.lock
rubygems
- asciidoctor 2.0.11
- asciidoctor-multipage 0.0.12
- bundler 2.2.5
- concurrent-ruby 1.1.7
- tilt 2.0.10
Podfile
cocoapods
- Firebase >= 0
Podfile.lock
cocoapods
- Nuke 8.4.1
- RxCocoa 5.1.1
- RxGesture 3.0.2
- RxRelay 5.1.1
- RxSwift 5.1.1
- SDWebImage 5.8.2
- SnapKit 5.0.1
- Starscream 3.1.1
- StreamChat 2.2.5
- StreamChatClient 2.2.5
- StreamChatCore 2.2.5
- SwiftyGif 5.2.0
- VoxeetSDK 2.4.0
- VoxeetUXKit 1.3.4
ROS/Dockerfile
docker
- jupyter/minimal-notebook latest build
Backend/requirements.txt
pypi
- Django *
- Pillow *
- django-cors-headers *
- folium ==0.2.1
- ipython *
- matplotlib *
- numpy *
- opencv-python *
- pandas *
- pdflatex *
- pylatex *
- scikit-image *
- tensorflow *
.github/workflows/blank.yml
actions
- gege-circle/github-action master composite
Pipfile
pypi
- mlflow *
- numpy *
- sklearn *
.github/workflows/codesee-arch-diagram.yml
actions
- Codesee-io/codesee-detect-languages-action latest composite
- Codesee-io/codesee-map-action latest composite
- actions-rs/toolchain v1 composite
- actions/checkout v2 composite
- actions/setup-java v3 composite
- actions/setup-node v3 composite
- actions/setup-python v2 composite
- ruby/setup-ruby v1 composite
.github/workflows/main.yml
actions
- actions/checkout v2 composite
- ansible/ansible-lint-action master composite
docker-compose.yml
docker
- compiler-backend latest
- compiler-frontend latest
- mysql latest
hunter2-lessons/http-header-injection/code/Dockerfile
docker
- python 3.7 build
udacity-c3-deployment/docker/Dockerfile
docker
- nginx alpine build
go.mod
go
- github.com/pkg/errors v0.9.1
build.gradle
maven
build.gradle.kts
maven
code/Flink/flink-basis-java/pom.xml
maven
- org.apache.flink:flink-java 1.9.0 provided
- org.apache.flink:flink-streaming-java_2.11 1.9.0 provided
- org.projectlombok:lombok 1.18.10 provided
- log4j:log4j 1.2.17
- org.slf4j:slf4j-log4j12 1.7.7
pom.xml
maven
- cn.hutool:hutool-all 5.8.9
- javax.xml.bind:jaxb-api 2.3.1
- org.projectlombok:lombok
- org.springframework.boot:spring-boot-configuration-processor
- org.springframework.boot:spring-boot-starter-actuator
- org.springframework.boot:spring-boot-starter-aop
- org.springframework.boot:spring-boot-starter-test test
package-lock.json
npm
- 1222 dependencies
package.json
npm
- express 2.5.8
- request >= 2.9.202
- zlib >= 1.0.5
composer.json
packagist
- magento/framework 103.0.*
- magento/module-backend 102.0.*
- magepal/magento2-core >=1.1.11
- php ~7.3.0|~7.4.0|~8.1.0|~8.2.0|~8.3.0|~8.4.0
pubspec.lock
pub
- async 2.5.0-nullsafety.1
- boolean_selector 2.1.0-nullsafety.1
- characters 1.1.0-nullsafety.3
- charcode 1.2.0-nullsafety.1
- clock 1.1.0-nullsafety.1
- cloud_firestore 0.14.3
- cloud_firestore_platform_interface 2.2.0
- cloud_firestore_web 0.2.1
- collection 1.15.0-nullsafety.3
- cupertino_icons 1.0.0
- fake_async 1.2.0-nullsafety.1
- firebase 7.3.3
- firebase_auth 0.18.2
- firebase_auth_platform_interface 2.1.2
- firebase_auth_web 0.3.1+2
- firebase_core 0.5.2
- firebase_core_platform_interface 2.0.0
- firebase_core_web 0.2.1
- flutter 0.0.0
- flutter_login_facebook 0.4.0+1
- flutter_test 0.0.0
- flutter_web_plugins 0.0.0
- google_sign_in 4.5.6
- google_sign_in_platform_interface 1.1.2
- google_sign_in_web 0.9.2
- http 0.12.2
- http_parser 3.1.4
- intl 0.16.1
- js 0.6.2
- list_ext 0.1.15
- matcher 0.12.10-nullsafety.1
- meta 1.3.0-nullsafety.3
- nested 0.0.4
- path 1.8.0-nullsafety.1
- pedantic 1.9.2
- plugin_platform_interface 1.0.3
- provider 4.3.3
- quiver 2.1.5
- rxdart 0.24.1
- sky_engine 0.0.99
- source_span 1.8.0-nullsafety.2
- stack_trace 1.10.0-nullsafety.1
- stream_channel 2.1.0-nullsafety.1
- string_scanner 1.1.0-nullsafety.1
- term_glyph 1.2.0-nullsafety.1
- test_api 0.2.19-nullsafety.2
- typed_data 1.3.0-nullsafety.3
- vector_math 2.1.0-nullsafety.3
pubspec.yaml
pub
- connectivity development
- flutter_test {"sdk" => "flutter"} development
- font_awesome_flutter ^8.2.0 development
- google_maps_flutter ^0.5.33 development
- hawk_fab_menu development
- http development
- mailer ^3.2.1 development
- provider ^4.1.3 development
- shared_preferences ^0.5.10 development
- uuid ^2.1.0 development
- cupertino_icons ^0.1.3
- date_time_picker ^1.0.1
- dio
- flutter {"sdk" => "flutter"}
- flutter_launcher_icons ^0.8.0
- flutter_launcher_name ^0.0.1
- flutter_plugin_android_lifecycle ^1.0.9
- flutter_plugin_pdf_viewer ^1.0.7
- flutter_polyline_points ^0.1.0
- flutter_spinkit ^4.1.2
- flutter_svg
- geolocator ^5.3.1
- gx_file_picker ^1.9.0+2
- image_picker ^0.6.7+8
- location
- path
- path_provider ^1.6.14
- permission_handler ^4.4.0+hotfix.1
- simple_animations ^2.2.2
- sqflite ^1.3.1+1
- toast ^0.1.5
pyproject.toml
pypi
- accelerate ==0.34.2
- bitsandbytes ==0.43.2
- datasets ==2.16.1
- decord ==0.6.0
- einops ==0.6.1
- einops-exts ==0.0.4
- fastapi *
- fire *
- gradio ==3.35.2
- gradio_client ==0.2.9
- httpx *
- hydra-core *
- loguru *
- markdown2 [all]
- nltk ==3.3
- numpy ==1.26.4
- openai ==1.8.0
- opencv-python-headless ==4.8.0.76
- openpyxl ==3.1.2
- peft >=0.9.0
- pre-commit *
- pydantic <2,>=1
- pytest *
- pytorchvideo ==0.1.5
- pywsd ==1.2.4
- requests *
- ring_flash_attn ==0.1.1
- s2wrapper @git+https://github.com/bfshi/scaling_on_scales
- scikit-learn ==1.2.2
- seaborn *
- sentencepiece ==0.1.99
- shortuuid *
- timm ==0.9.12
- tokenizers >=0.15.2
- torch ==2.3.0
- torchvision ==0.18.0
- transformers ==4.46.0
- tyro *
- uvicorn *
- webdataset ==0.2.86
- xgrammar *
requirements.txt
pypi
- certifi ==2024.7.4
- chardet ==5.2.0
- charset-normalizer ==3.3.2
- idna ==3.7
- numpy ==2.0.1
- pandas *
- python-dateutil ==2.9.0.post0
- pytz ==2024.1
- requests ==2.32.3
- six ==1.16.0
- tzdata ==2024.1
- urllib3 ==2.2.2
scraper_requirements.txt
pypi
- numpy ==1.24.3
- opencv-python ==4.8.0.74
setup.py
pypi
- matplotlib *
- multipledispatch *
- numpy *
- pandas *
.github/workflows/jekyll-gh-pages.yml
actions
- actions/checkout v4 composite
- actions/configure-pages v5 composite
- actions/deploy-pages v4 composite
- actions/jekyll-build-pages v1 composite
- actions/upload-pages-artifact v3 composite
environment.yml
pypi
- googlemaps *
- twitter *