Go to file
Stravnik 405ebf45b6
list update
2023-11-15 09:41:40 +03:00
.github Create FUNDING.yml 2023-06-07 15:38:09 +03:00
data list update 2023-11-15 09:41:40 +03:00
scripts path fix 2022-04-16 12:29:53 +03:00
.gitattributes Added web app to view database 2022-05-08 09:49:14 +03:00
.gitignore Added web app to view database 2022-05-08 09:49:14 +03:00
CHANGELOG.md list update 2023-11-15 09:41:40 +03:00
CODE_OF_CONDUCT.md add CODE_OF_CONDUCT.md & update README.md 2022-04-15 12:08:08 +03:00
HOW-TO-ADD.md Update HOW-TO-ADD.md 2023-10-17 17:16:41 +05:30
HOW-TO-REPORT.md translation of .md files into English 2022-04-08 14:57:52 +03:00
LICENSE Initial commit 2022-03-17 20:49:26 +03:00
README.md list update 2023-11-15 09:41:40 +03:00

README.md

toxic-repos


Now you can send information to be added to the list via telegram bot! DarkSider BOT

Also join our telegram chat. There, information about "toxic repositories" appears even faster!


We are against discrediting open source software

What is this?

Recently, cases of adding code of varying degrees of danger to popular Open Source projects have become more frequent. This can pose a threat to people, and also undermines the credibility of the Open Source community and Open Source as such.

🔗 Web site | 💬 Telegram channel | 💬 Telegram chat | 💬 Telegram BOT

Statistics

Records in the database: 708

CHANGELOG

Additionally

CSV | JSON | SQLite

Recommendations

  • Assembly isolation in containers, including for intermediate assemblies on developers' machines.
  • Forks all libraries (if possible) and containers to yourself.
  • Mirroring package repositories.
  • Inclusion in CI of at least search by keywords, UTF characters with the image of the Ukrainian flag and comparison of the list of files with the whitelist.
  • Research on code analysis tools.
  • Sending a report according to instructions

Have an idea for improvement?

Contributors