https://github.com/stravnik/toxic-repos

We are against discrediting open source software
https://github.com/stravnik/toxic-repos

github npm sqlite standwithopensource

Last synced: about 3 hours ago
JSON representation

We are against discrediting open source software

• Host: GitHub
• URL: https://github.com/stravnik/toxic-repos
• Owner: toxic-repos
• License: cc0-1.0
• Created: 2022-03-17T17:49:25.000Z (over 2 years ago)
• Default Branch: main
• Last Pushed: 2024-10-02T11:42:57.000Z (about 1 month ago)
• Last Synced: 2024-10-27T18:21:24.706Z (12 days ago)
• Topics: github, npm, sqlite, standwithopensource
• Language: Python
• Homepage: https://toxic-repos.ru/?utm_source=github&utm_medium=repository&utm_campaign=info
• Size: 1.9 MB
• Stars: 566
• Watchers: 53
• Forks: 33
• Open Issues: 4
• Metadata Files:
  • Readme: README.md
  • Changelog: CHANGELOG.md
  • Funding: .github/FUNDING.yml
  • License: LICENSE
  • Code of conduct: CODE_OF_CONDUCT.md

Awesome Lists containing this project

README

        
# toxic-repos

---

> Now you can send information to be added to the list via telegram bot! [DarkSider BOT](https://t.me/darksider_bot)

> 

> [Also join our telegram chat. There, information about "toxic repositories" appears even faster!](https://t.me/g1l2a)

---

### We are against discrediting open source software

## What is this?

Recently, cases of adding code of varying degrees of danger to popular Open Source projects have become more frequent.

This can pose a threat to people, and also undermines the credibility of the Open Source community and Open Source as such.

[:link: Web site](https://toxic-repos.ru/?utm_source=github&utm_medium=repository&utm_campaign=md) | [:speech_balloon: Telegram channel](https://t.me/toxic_repos) | [:speech_balloon: Telegram chat](https://t.me/g1l2a) | [:speech_balloon: Telegram BOT](https://t.me/darksider_bot)

## Statistics

Records in the database: more than 800

[CHANGELOG](CHANGELOG.md)

## Additionally

[CSV](data/csv/toxic-repos.csv) | [JSON](data/json/toxic-repos.json) | [SQLite](data/sqlite/toxic-repos.sqlite3)

## Recommendations

- Code isolation in containers, including intermediate code on developers' machines.

- Fork all libraries (if possible) and containers to yourself.

- Mirroring package repositories.

- Inclusion in CI of at least search by keywords, UTF characters with the image of the Ukrainian flag and comparison of the list of files with the whitelist.

- Research on code analysis tools.

- Sending a report according to [instructions](HOW-TO-REPORT.md)

## Have an idea for improvement?

- You can write to our [Telegram chat](https://t.me/g1l2a)

- You can write to us at [email protected]

- Submit your pull request.

## Contributors