Package Health Score

30 / 100

security
Security issues found
popularity
Limited
maintenance
Inactive
community
Sustainable

Popularity

Limited

GitHub Stars: 10
Forks: 15
Contributors: 20

Direct Usage Popularity

Based on project statistics from the GitHub repository for the PyPI package pollbot, we found that it has been starred 10 times.

Security

Security issues found

Security and license risk for latest version

Release Date: Feb 21, 2018
Direct Vulnerabilities: 0
C
1
H
1
M
0
L
Indirect Vulnerabilities: 0
C
0
H
0
M
0
L
License Risk: 0
H
4
M
0
L

All security vulnerabilities belong to production dependencies of direct and indirect packages.

License

MPL-2.0

Non-Permissive License

We noticed that this project uses a license which requires less permissive conditions such as disclosing the source code, stating changes or redistributing the source under the same license. It is advised to further consult the license terms before use.

Security Policy

We found a way for you to contribute to the project! Looks like pollbot is missing a security policy.

Snyk detected that the latest version of pollbot has a security vulnerability.

We highly advise you to review these security issues.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Fix it in your project with Snyk!

Maintenance

Inactive

Commit Frequency

Open Issues: 18
Open PR: 6
Last Release: 7 years ago
Last Commit: 2 months ago

Further analysis of the maintenance status of pollbot based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for pollbot is that it hasn't seen any new versions released to PyPI in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Sustainable

Readme: Yes
Contributing.md: No
Code of Conduct: Yes
Contributors: 20
Funding: No

With more than 10 contributors for the pollbot repository, this is possibly a sign for a growing and inviting community.

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Python Versions Compatibility: ==3.6.*

Age: 7 years
Latest Release: 7 years ago
Dependencies: 5 Direct / 18 Total
Versions: 14
Maintainers: 1
Wheels: OS Independent

Readme

PollBot

PollBot is an hardworking little robot (microservice) that frees its human masters from the toilsome task of polling for the state of things during the Firefox release process.

Version 1.0 will provide, at a minimum, these API resources:

build exists on archive.mozilla.org
release notes published
product-details.mozilla.org JSON contains the release
download links are on mozilla.org and they work
security advisories are published and links work

License

MPL v2 (see LICENSE)

Configuration

PollBot is a currently a stateless service, which means there are no database services to configure.

However you can configure the following parameters using environment variables:

VARIABLE	Description
`PORT`	The service PORT, by default runs on 9876
`VERSION_FILE`	The JSON version file, default PWD/version.json
`CACHE_MAX_AGE`	The Cache-Control max-age value, default to 30 seconds. Set it to 0 to set it to no-cache
`TELEMETRY_API_KEY`	API KEY to use to query the Telemetry Service
`TELEMETRY_USER_ID`	Telemetry User ID to select user query only.

CHANGELOG

1.1.4 (2018-02-21)

Fix TELEMETRY_USER_ID comparison.

1.1.3 (2018-02-20)

Only search for queries created by this user. (fixes #195)

1.1.2 (2018-02-15)

Update the whatsdeployed URL.
Add host to the OpenAPI specification.

1.1.1 (2018-02-14)

Improve the Telemetry query to always update the yesterday filter. (#193)

1.1.0 (2018-02-14)

Improve Telemetry main_summary query performances. (#188)

1.0.0 (2018-01-31)

Add validation rules for release notes links (HTTPS, locale free). (#160)
Read the correct mercurial shipped locale file for release candidates (#161)
Add an actionable flag for tasks (#162)
Order checks putting non actionable checks at the end. (#163)
Add support for devedition checks (#166)
Add a whatsdeployed link in the contribute.json file (#168)
Use main_summary instead of update_parquet for the Telemetry uptake (#172)
Calculate the crash-stats uptake including Beta previous version. (#174)
Use the aurora channel for devedition checks (#177)
Fix Balrog beta and devedition version comparison (#178)
Display the backgroundRate value but do not use it to mark the check as incomplete (#180)
Handle coming soon release notes status (#182)
Take more versions into account for the crash-stats query (#184)
Use the DEVEDITION specific Mercurial tag for shipped-locales (#185)

0.6.1 (2017-12-20)

Fix release notes checks for ESR.

0.6.0 (2017-12-20)

Reuse the same Nightly query for Telemetry Update Parquet (#141)
Read the correct locale file for release candidates (#146)
Add bouncer checks and endpoints (#147)
Handle case when Download links return a 504 instead of a 302 (#152)
Always expect a major version security advisory title for release and ESR (#150)
Add an actionable flag for tasks to define if theyshould make the release fail or not (#151)
Switch to Telemetry Athena Data Source (#155)
Add an indication about Crash-Stats 24h latency (#156)
Fix get_version_from_filename for all locales (#157)
Validate Release notes links (#159)

0.5.0 (2017-11-06)

Add support for release candidates (#137)
Add support for new bedrock beta links (#139)

0.4.0 (2017-10-27)

Add support for TaskError url (#113)
Ignore Copy of Telemetry search results (#115)
Deduplicate Balrog Build IDs (#116)
Build telemetry query from a list of build IDs (#117)
Add the product lists in the homepage (#118)
Handle Telemetry empty results responses (#121)
Enable a buildhub check for Nightly (#129)
Keep only the Uptake ratio (#130)
Use Buildhub prod (#131)

0.3.0 (2017-09-25)

Update the archive check to validate that all expected files have been created for all locales and platforms (#48)
Add a task and endpoint to check the release info in buildhub (#70)
Add a task and endpoint to check the channel balrog rule (#72)
Validate version number to avoid calling tasks with gibberish (#92)
Remove archive nightly specific checks and endpoints (#95)
Add a task and endpoint to check for partner-repacks (#100)
Add a task and endpoint to get crash-stats uptake (#97)
Add a task and endpoint to get telemetry update-parquet uptake (#97)

0.2.1 (2017-09-06)

Fixes archive-l10n checks for nightly with new MAR files (#91)

0.2.0 (2017-09-01)

Add a /v1/{product} endpoint (#47)
Add a /v1/{product}/ongoing-versions endpoint (#52)
Add a /v1/{product}/{version} that lists all checks (#62)
Add a nightly specific task and endpoint for latest-date publication (#68)
Add a nightly specific task and endpoint for latest-date-l10n publication (#68)
Add more context about what the task have been checking (#58)
Fix the ESR download links task url (#66)
Add a task to validate if devedition and beta version matches (#78)
Redirects URL ending by a / to URL without the / in case of 404 (#54)
Add Cache-Control headers (#43)
Handle aiohttp.ClientError as tasks errors (#76)
Handle Archive CDN errors (#75)

0.1.0 (2017-08-08)

Add the /v1/ info page (#10)
Add the archive.mozilla.org bot (#17)
Add the bedrock release-notes bot (#16)
Add the bedrock security-advisories bot (#26)
Add the bedrock download-page bot (#28)
Add the product-details bot (#27)
Expose the Open API Specification (#23)
Add the contribute.json endpoint (#25)
Add CORS support (#28)
Add the /__version__ endpoint (39)
Add the __heartbeat__ and __lbheartbeat__ endpoints (#38)
Serve the Swagger documentation (#30)

Contributors

Ethan Glasser-Camp <>
Mathieu Agopian <>
Mathieu Leplatre <>
Rémy Hubscher <>

pollbot dependencies

aiohttp aiohttp-cors aiohttp-swagger pyquery ruamel-yaml

FAQs

What is pollbot?

A service that polls other services about releases deliveries. Visit Snyk Advisor to see a full health score report for pollbot, including popularity, security, maintenance & community analysis.

Is pollbot popular?

The python package pollbot receives a total of 120 weekly downloads. As such, pollbot popularity was classified as limited. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is pollbot well maintained?

We found indications that pollbot is an Inactive project. See the full package health analysis to learn more about the package maintenance status.

Is pollbot safe to use?

Security issues were found while scanning the latest version of pollbot, and a total of 2 vulnerabilities were detected. It is highly advised to conduct a security review before using this package. View the full security scan results.

Last updated on 21 November-2024, at 21:40 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

Package Health Score

Direct Usage Popularity

Security and license risk for latest version

Commit Frequency

Embed Package Health Score Badge

Keep your project healthy

Check your requirements.txt

Snyk Vulnerability Scanner

Readme

PollBot

License

Configuration

CHANGELOG

1.1.4 (2018-02-21)

1.1.3 (2018-02-20)

1.1.2 (2018-02-15)

1.1.1 (2018-02-14)

1.1.0 (2018-02-14)

1.0.0 (2018-01-31)

0.6.1 (2017-12-20)

0.6.0 (2017-12-20)

0.5.0 (2017-11-06)

0.4.0 (2017-10-27)

0.3.0 (2017-09-25)

0.2.1 (2017-09-06)

0.2.0 (2017-09-01)

0.1.0 (2017-08-08)

Contributors

pollbot dependencies

FAQs

What is pollbot?

Is pollbot popular?

Is pollbot well maintained?

Is pollbot safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues