engineering/java-topology
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
java-topology/SCAN-TODO.md

2.9 KiB
Raw Blame History

Scan TODO — Unscanned High-Value Targets

Status: 865 UNDF, 420+ defect dirs, 34 waves complete. Rule: clone, scan, delete clone after. Keep disk under 90%.

Priority 1 — Major infrastructure not yet scanned

  • Squid (C, HTTP proxy, huge install base)
  • PgBouncer (C, PostgreSQL connection pooler)
  • Suricata (C, IDS/IPS)
  • Snort (C, IDS/IPS)
  • WireGuard (deeper, Go userspace tools)
  • Thunderbird (C++, email client, undo/history)
  • Wine (C, Windows compatibility layer)

Priority 2 — ERP/Business not yet scanned

  • Dolibarr (PHP, ERP) — scanned (see prior wave)
  • Tryton (Python, ERP) — tryton-0001 (_save_values previous list O(T*P)); MOADs 0002/0003/0004/0005 CLEAN
  • xTuple PostBooks (C++/JS, ERP)
  • SuiteCRM (PHP, CRM)
  • InvoiceNinja (PHP, invoicing)

Priority 3 — Collaboration/Chat

  • Rocket.Chat (deeper, TypeScript) — 0003 MOAD-0001 video-conf endDirectCall O(S*U); 0004 MOAD-0004 CWE-312 OAuth secrets logged; MOAD-0002/0003/0005 CLEAN
  • Zulip (deeper, Python)
  • Jitsi Meet (Java/TypeScript)
  • Matrix Dendrite (Go, alt homeserver — already in defects/)
  • Mattermost (deeper, Go)

Priority 4 — Desktop apps

  • Pidgin/Finch (C, chat client)
  • HexChat (C, IRC client)
  • Evolution (C, email/calendar)
  • Thunderbird (C++, email)
  • Calibre (deeper, Python ebook manager)
  • Okular/Evince/Zathura (PDF viewers)
  • OpenSCAD (C++, parametric CAD)
  • Solvespace (C++, parametric CAD)
  • Cura / PrusaSlicer (C++, 3D printing slicers)

Priority 5 — AI/ML new wave

  • Ollama (Go, local LLM runtime)
  • LangChain (Python, LLM orchestration)
  • Hugging Face Transformers (Python)
  • vLLM (Python/C++, LLM serving)
  • llama.cpp (C++, already deleted clone, re-clone to scan)

Priority 6 — Scientific/Data

  • OpenFOAM (C++, CFD simulation)
  • ROOT (C++, CERN data analysis)
  • Scilab (C/Fortran, numerical computation)
  • Octave (deeper, C++)
  • R (deeper, C)
  • Julia (deeper)

Priority 7 — Emulators/Retro

  • PCSX2 (C++, PS2 emulator)
  • RPCS3 (C++, PS3 emulator)
  • PPSSPP (C++, PSP emulator)
  • DOSBox-X (C++, DOS emulator)

Priority 8 — Networking/Infra

  • Forgejo (Go, Gitea fork)
  • Woodpecker CI (Go)
  • Drone CI (Go)
  • Gitea (deeper)
  • Wekan (Meteor/JS, kanban board) — wekan-0003 MOAD-0001 wekanCreator member dedup O(M^2)/O(C*M^2); MOAD-0002/0003/0004/0005 CLEAN
  • Taiga (Python, project management)
  • Redmine (Ruby, project management)

Priority 9 — IoT/Embedded

  • Zephyr RTOS (C)
  • FreeRTOS (C)
  • Contiki-NG (C)
  • ESP-IDF (C)
  • TinyGo (Go)

Already scanned CLEAN (no need to rescan)

Odoo, Beam, Krita, Hive (pre-existing only), Keycloak, Shiro, Netdata, etcd, GCC, Rust compiler, ScyllaDB, qBittorrent, Transmission, pygame, MPD, Rhythmbox, MAME, Dolphin, ScummVM, Nextcloud, Gitea, mpv, Metabase, Emacs, HandBrake, Kubernetes (MOAD-5)