View Code? Open in Web Editor
NEW
Analyze any snippet, file, or repository to detect possible security flaws such as secret in code, open source vulnerability, code security, vulnerability, insecure infrastructure as code, and potential legal issues with open source licenses.
Home Page: https://codetotal.io
License: GNU Affero General Public License v3.0
JavaScript 0.96%
TypeScript 97.47%
HTML 0.28%
CSS 0.69%
Dockerfile 0.60%
codetotal's People
codetotal's Issues
Add a button to easily share CodeTotal from the UI
Opening analysis dialog causes too many re-renders.
Consider splitting the report store into separate stores.
Once we scan a snippet we have no way to see again the content of this snippet
Maybe a click on the results page ?
Show the user the duration it took to perform the analysis
WebSocket connection does not close properly when navigating out of report page
Replace report header strip with a progress bar
After pasting url of a repo, when hitting ENTER on the keyboard, it should validate the form
When selecting a python file, "language" is displayed empty
It should either not be displayed at all, or display "Python" :)
Change "Score" label to "Risk" since a clean analysis has either zero risk or a score of a 100 :)
In case of a repo -> open in a new tab
In case of a snippet/file -> show code dialog with highlighted row number
Current state
megalinter-complete
signals the end of an analysis
Problem
Parsers didn't finish and the data isn't displayed to the user since the WS connection is closed
Solution
Wait for parsers to complete before marking the analysis as completed
The current parallel call of npm api for N packages triggers too many 429 and consume lots of CPU resources.
We need either to:
Call npm api in bulk with a list of packages
Define some "pool" to avoid to have more than 5 parallel api calls
Cleanup unused dependencies in package.json files
Category: SBOM
Policy Name: Unused direct dependency in code
Application Name: oxsecurity/codetotal
Fix Link:
Click here to see details in OX App:
Issue Description:
Repo oxsecurity/codetotal has 14 dependencies that are not utilized. In other words, no functions or variables of the dependencies are used.
Recommendations:
It is best practise to remove dependencies that are not being used.
Aggregations:
Package
Stars
Downloads
Forks
Vulnerabilities
SBOM results should allow to click to visit home page of a npm or a python package
Pypi package license is not displayed in SBOM results tab