FeeiCN / Cobra
Source Code Security Audit (源代码安全审计)
- Stars
- 3,183 stars
- Forks
- 938 forks
- Language
- Python
- License
- MIT
- Created
- Apr 15, 2016
- Last push
- Sep 16, 2022
- Updated
- Nov 9, 2026
- Status
- Archived
Why these Tags: an agent read the README and quoted it
- Static analysis from the readme:
Cobra是一款**源代码安全审计**工具，支持检测多种开发语言源代码中的**大部分显著**的安全问题和漏洞。
An agent gave these Tags from the fixed Tag list in the AwesomeRepos source code. A code check kept each Tag only when its quote is in the text. A wrong Tag? Report an error with the form at the end of this page.
Admitted to the Repository Index on Nov 11, 2026: 3,183 stars on 2026-11-11.
Star History
186 days recorded, May 11, 2026 – Nov 12, 2026 (UTC). Net change +10 stars.
The star count of each day is the latest count minus the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour.
Add ?theme=light or ?theme=dark
to the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/FeeiCN/Cobra) Badge
[](https://awesomerepos.com/FeeiCN/Cobra) Timeline
It gained stars on 9 of the 186 days recorded since May 11, 2026.
Its largest 7 days were May 26, 2026 to Jun 1, 2026: 2 stars.
In the 30 days to Nov 12, 2026 it got 1 star, the same as in the 30 days before.
It had 3,173 stars before May 11, 2026 and has 3,183 stars now: 1,817 fewer than 5,000.
It was archived before Nov 12, 2026, the day of its first Observation.
- Created on the Repository Host
- Release v2.0.0-alpha.2
- Release v2.0.0-alpha.3
- Release v2.0.0-alpha.4
- Release v2.0.0-alpha.5
- Release v2.0.0-alpha.6
- Latest push
- +1 stars in one day
- +1 stars in one day
- Largest star day recorded: +2 stars
- Entered the Repository Index: 3,183 stars on 2026-11-11
The timeline comes from the creation date and the releases on the Repository Host, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day. The list shows up to 5 stable releases from the latest 10 releases recorded. When none of them is stable, one item counts the pre-releases. On the chart of net stars each day, a solid line marks each recorded release.
Forks and pushes
From 2 Observations, Nov 12, 2026 – Nov 13, 2026. Forks 0. AwesomeRepos saw a new push on 0 of 1 days.
- Nov 13, 2026: no new push
A filled day: the last push time changed since the Observation before it.
Health facts
Measured facts in four separate dimensions, each with a date and a source. AwesomeRepos does not add them into one score. AwesomeRepos reads the weekly commits, the changelog, and the community files each week for the 5,000 visible repositories with the most stars and for each rising repository. How AwesomeRepos defines each check
Copies a prompt for a coding agent. It has 1 task for the maintainers of FeeiCN/Cobra.
Improve the Health Facts of the GitHub repository FeeiCN/Cobra. AwesomeRepos measures facts about how a repository is maintained, released, secured, and documented. Its page for this repository is https://awesomerepos.com/FeeiCN/Cobra. A change to the repository can improve each of the item below. Each item gives the measured fact or score, and a task. 1. A release in the last 365 days Fact: Newest release v2.0.0-alpha.6 on 2018-04-02, 3147 days ago. 0 releases in the last 365 days. Rule: The newest published GitHub release (a pre-release counts; a draft does not) is 365 days old or less. A repository that publishes only tags, or only to a package registry, has no GitHub release. The release refresh reads the 10 newest releases after each push to the repository, and at least each 30 days. The index refresh reads the date of the last push each day. Task: Prepare a release, but do not publish it. Find the changes since the newest release, propose the next semantic version and the release notes, and ask me to publish the GitHub release. If nothing changed since the newest release, skip this item. If the project publishes only to a package registry, add a CI step that also makes a GitHub release for each version tag. Rules for this work: - Each file must be true for this project. Do not copy text that does not apply to it. - Do not choose a licence, a contact, or a release version for me. Ask me. - Do not publish a release, change a repository setting, or push to the default branch. Make the changes on a new branch. - Keep each change small, and run the checks of this repository before you finish. - At the end, list each item as DONE, SKIPPED (with the reason), or NEEDS A DECISION (with the question). AwesomeRepos reads these facts again in its next scan. The definitions of the checks: https://awesomerepos.com/health-facts
Maintenance
0 of 4 checks (2 without data)-
No: Not archived
GitHub marks the repository as archived. Source
-
No: A push in the last 90 days
Last push on 2022-09-16, 1519 days ago. Source
-
No data: Commits in the last 13 weeks
No data: AwesomeRepos has not read the weekly commits.
-
No data: Commits in 26 or more of the last 52 weeks
No data: AwesomeRepos has not read the weekly commits.
Releases
1 of 3 checks (1 without data)-
No: A release in the last 365 days
Newest release v2.0.0-alpha.6 on 2018-04-02, 3147 days ago. 0 releases in the last 365 days. Source
-
Yes: The newest release tag is a semantic version
The newest release tag is v2.0.0-alpha.6. Source
-
No data: A changelog file at the root
No data: AwesomeRepos has not scanned this repository.
Security practice
0 of 1 check (1 without data)-
No data: A security policy
No data: AwesomeRepos has not scanned this repository.
AwesomeRepos has not asked OpenSSF Scorecard about this repository.
Community files
1 of 3 checks (2 without data)-
Yes: A licence
GitHub finds the licence MIT. Source
-
No data: A contributing guide
No data: AwesomeRepos has not scanned this repository.
-
No data: A code of conduct
No data: AwesomeRepos has not scanned this repository.
Dependencies in the index
This section shows the packages that connect this repository to other repositories in the index.
The GitHub dependency graph of this repository names 95 direct packages (scanned on Nov 13, 2026). Packages from 19 other repositories in the index are among them.
No scanned repository names a package from this repository.
Uses (in the index) · 19
- pallets/flask 75K
PyPI: flask
- psf/requests 55K
PyPI: requests
- celery/celery 29K
PyPI: celery
-
PyPI: pytest
-
PyPI: sqlalchemy
- pypa/pip 10K
PyPI: pip
-
PyPI: flask-restful
- pallets/werkzeug 6.9K
PyPI: werkzeug
- apache/groovy 5.5K
Maven: org.codehaus.groovy:groovy, org.codehaus.groovy:groovy-json, org.codehaus.groovy:groovy-xml
- sqlalchemy/alembic 4.5K
PyPI: alembic
Show all 19
- alibaba/fastjson2 4.4K
Maven: com.alibaba:fastjson
-
Maven: com.fasterxml.jackson.core:jackson-databind
- pallets/itsdangerous 3.1K
PyPI: itsdangerous
- ahupp/python-magic 2.9K
PyPI: python-magic
- qos-ch/slf4j 2.5K
Maven: org.slf4j:slf4j-api
-
PyPI: flask-migrate
-
Maven: com.fasterxml.jackson.core:jackson-core
-
PyPI: markupsafe
- sqlalchemy/mako 463
PyPI: mako
Used by (in the index) · 0
None.
Sources: the GitHub dependency graph of each repository, and deps.dev for the source repository of each package (checked on Nov 4, 2026). A dependency graph also names development packages. deps.dev takes most source repositories from package metadata. How the dependency graph is made
Observations
Latest Observation, Nov 13, 2026: 3,183 stars, 938 forks, last push Sep 16, 2022, archived. One of 2 Observations since Nov 12, 2026.