基础信息
项目名称：LibrePhotos/librephotos
项目徽章：
仓库地址：https://github.com/pterodactyl/panel
检测报告地址：https://www.murphysec.com/console/report/1746054064368164864/1755414375080136704
此报告由Murphysec提供
漏洞列表
暂无
缺陷组件
暂无
许可证风险
| 许可证类型 | 相关组件 | 许可证风险 |
|---|---|---|
| Apache-2.0 | 7 | 低 |
| MIT | 29 | 低 |
| 自定义许可证 | 5 | 低 |
| BSD-3-Clause | 13 | 低 |
| HPND | 1 | 低 |
| LGPL-2.1-only | 1 | 低 |
| GPL-3.0-or-later | 1 | 低 |
| GPL-2.0 | 1 | 中 |
| BSD-2-Clause | 1 | 低 |
| MIT License | 3 | 低 |
| LGPL-3.0 | 1 | 中 |
| Python-2.0 | 1 | 低 |
| GPL-2.0-or-later | 1 | 低 |
| LGPL-3.0-only | 1 | 低 |
SBOM清单
| 组件名称 | 组件版本 | 是否直接依赖 | 仓库 |
|---|---|---|---|
| coverage | 7.1.0 | 间接依赖 | pip |
| pytest | 7.3.1 | 间接依赖 | pip |
| isort | 5.12.0 | 间接依赖 | pip |
| rest_framework | 间接依赖 | pip | |
| face-recognition | 1.3.0 | 间接依赖 | pip |
| onnx | 1.14.1 | 间接依赖 | pip |
| pre-commit | 2.14.0 | 间接依赖 | pip |
| get_location_timeline | 间接依赖 | pip | |
| pycocotools | 2.0.7 | 间接依赖 | pip |
| drf-spectacular | 0.27.1 | 间接依赖 | pip |
| get_photo_month_counts | 间接依赖 | pip | |
| LongRunningJob | 间接依赖 | pip | |
| Pillow | 10.2.0 | 间接依赖 | pip |
| Avg | 间接依赖 | pip | |
| get_metadata | 间接依赖 | pip | |
| AlbumDate | 间接依赖 | pip | |
| Photo | 间接依赖 | pip | |
| pycocoevalcap | 1.2 | 间接依赖 | pip |
| nose | 1.3.7 | 间接依赖 | pip |
| get_unknown_person | 间接依赖 | pip | |
| OuterRef | 间接依赖 | pip | |
| django-cors-headers | 4.3.1 | 间接依赖 | pip |
| is_raw | 间接依赖 | pip | |
| timezonefinder | 6.2.0 | 间接依赖 | pip |
| PyExifTool | 0.4.9 | 间接依赖 | pip |
| psutil | 5.9.8 | 间接依赖 | pip |
| Q | 间接依赖 | pip | |
| request | 间接依赖 | pip | |
| Flask | 3.0.1 | 间接依赖 | pip |
| safetensors | 0.4.2 | 间接依赖 | pip |
| pylint-django | 2.5.3 | 间接依赖 | pip |
| django-cryptography | 1.1 | 间接依赖 | pip |
| Flask-Cors | 4.0.0 | 间接依赖 | pip |
| User | 间接依赖 | pip | |
| onnxruntime | 1.17.0 | 间接依赖 | pip |
| llama-cpp-python | 0.2.38 | 间接依赖 | pip |
| markupsafe | 2.1.4 | 间接依赖 | pip |
| OTHER_RULES_PARAMS | 间接依赖 | pip | |
| django-extensions | 3.2.3 | 间接依赖 | pip |
| nltk | 3.8.1 | 间接依赖 | pip |
| djangorestframework | 3.14.0 | 间接依赖 | pip |
| scikit-learn | 1.4.1 | 间接依赖 | pip |
| QuerySet | 间接依赖 | pip | |
| Django | 4.2.9 | 间接依赖 | pip |
| CommandError | 间接依赖 | pip | |
| django-q2 | 1.6.1 | 间接依赖 | pip |
| is_number | 间接依赖 | pip | |
| Flask-RESTful | 0.3.10 | 间接依赖 | pip |
| generate_caption | 间接依赖 | pip | |
| File | 间接依赖 | pip | |
| ACCESS_READ | 间接依赖 | pip | |
| djangorestframework-simplejwt | 5.3.1 | 间接依赖 | pip |
| setuptools | 67.6.1 | 间接依赖 | pip |
| F | 间接依赖 | pip | |
| black | 23.3.0 | 间接依赖 | pip |
| AsyncTask | 间接依赖 | pip | |
| sentence_transformers | 2.2.2 | 间接依赖 | pip |
| gunicorn | 21.2.0 | 间接依赖 | pip |
| Pygments | 2.15.0 | 间接依赖 | pip |
| timm | 0.4.12 | 间接依赖 | pip |
| ChunkedUploadView | 间接依赖 | pip | |
| ipython-genutils | 0.2.0 | 间接依赖 | pip |
| schedule | 间接依赖 | pip | |
| Faker | 17.6.0 | 间接依赖 | pip |
| Sum | 间接依赖 | pip | |
| migrations | 间接依赖 | pip | |
| gevent | 23.9.1 | 间接依赖 | pip |
| EncoderCNN | 间接依赖 | pip | |
| django | 间接依赖 | pip | |
| api | 间接依赖 | pip | |
| pyfakefs | 5.2.0 | 间接依赖 | pip |
| PyJWT | 2.8.0 | 间接依赖 | pip |
| get_provider_parser | 间接依赖 | pip | |
| Face | 间接依赖 | pip | |
| hdbscan | 0.8.33 | 间接依赖 | pip |
| py-cpuinfo | 9.0.0 | 间接依赖 | pip |
| UNKNOWN_CLUSTER_ID | 间接依赖 | pip | |
| export_onnx | 间接依赖 | pip | |
| django-filter | 23.5 | 间接依赖 | pip |
| tzdata | 2023.4 | 间接依赖 | pip |
| django-picklefield | 3.1 | 间接依赖 | pip |
| Wand | 0.6.13 | 间接依赖 | pip |
| drf-extensions | 0.7.1 | 间接依赖 | pip |
| django-silk | 5.1.0 | 间接依赖 | pip |
| ipdb | 0.13.13 | 间接依赖 | pip |
| Count | 间接依赖 | pip | |
| get_provider_config | 间接依赖 | pip | |
| geopy | 2.4.1 | 间接依赖 | pip |
| models | 间接依赖 | pip | |
| matplotlib | 3.8.2 | 间接依赖 | pip |
| pyvips | 2.2.1 | 间接依赖 | pip |
| pylint | 2.17.2 | 间接依赖 | pip |
| BaseCommand | 间接依赖 | pip | |
| flake8 | 6.0.0 | 间接依赖 | pip |
| ChunkedUploadCompleteView | 间接依赖 | pip | |
| DEFAULT_RULES_PARAMS | 间接依赖 | pip | |
| transformers | 4.37.0 | 间接依赖 | pip |
| seaborn | 0.13.1 | 间接依赖 | pip |
| django-constance | 3.1.0 | 间接依赖 | pip |
| DecoderRNN | 间接依赖 | pip | |
| faiss-cpu | 1.7.4 | 间接依赖 | pip |
| psycopg | 3.1.17 | 间接依赖 | pip |
| ipython | 8.10.0 | 间接依赖 | pip |
| jsonify | 间接依赖 | pip | |
| prompt-toolkit | 3.0.38 | 间接依赖 | pip |
| pytz | 2023.4 | 间接依赖 | pip |
| python-magic | 0.4.27 | 间接依赖 | pip |
| Cluster | 间接依赖 | pip | |
| Person | 间接依赖 | pip | |
| is_metadata | 间接依赖 | pip | |
| tqdm | 4.65.2 | 间接依赖 | pip |
| get_deleted_user | 间接依赖 | pip | |
| constance | 间接依赖 | pip | |
| networkx | 3.2.1 | 间接依赖 | pip |