Welcome to the new Snyk Vulnerability Database experience!
We've upgraded the information available here with data you may have seen previously within Snyk Advisor. For a more comprehensive update, please refer to our product updates page (opens in a new tab) .

oneflow

Licenses: Unknown

Published: 4 years ago Last updated: 3 years ago Latest version: 0.9.0

pip

GitHub

36/100

securitySecurity issues found
popularitySmall
maintenanceInactive
communityActive

Maintenance

INACTIVE

Commit Frequency

No commits over the last 6 months

Open Issues: 465
Open PR: 181
New PRS: 1
Last Release: 3 years ago
Last Commit: 7 months ago
Maintainers: 160

Further analysis of the maintenance status of oneflow based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for oneflow is that it hasn't seen any new versions released to PyPI in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Popularity

SMALL

GitHub Stars: 9.4k
Forks: 1.0k
Contributors: 160

Based on project statistics from the GitHub repository for the PyPI package oneflow, we found that it has been starred 9,391 times.

Community

ACTIVE

Readme: No
Contributing.md: No
Code of Conduct: No
Contributors: 160
Funding: No
LICENSE: Apache-2.0

A good and healthy external contribution signal for oneflow project, which invites more than one hundred open source maintainers to collaborate on the repository.

We found a way for you to contribute to the project! Looks like oneflow is missing a Code of Conduct.

How about a good first contribution to this project? It seems that oneflow is missing a README file.

License

Unknown[0,);

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the oneflow package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Security

SECURITY ISSUES FOUND

Show only direct vulnerabilities in latest version

Vulnerability	Vulnerable Version
H Out-of-bounds Read	[0,)
H Improper Validation of Specified Quantity in Input	[0,)
H Improper Validation of Array Index	[0,)
H Improper Validation of Array Index	[0,)
M Access of Resource Using Incompatible Type ('Type Confusion')	[0,)
H Improper Validation of Array Index	[0,)
H Out-of-bounds Read	[0,)
H Improper Validation of Specified Quantity in Input	[0,)
H Division by zero	[0,)
M Division by zero	[0,)
H Improper Validation of Specified Quantity in Input	[0,)
H Uncaught Exception	[0,)
H Improper Validation of Array Index	[0,)
M Division by zero	[0,)
H Improper Validation of Specified Quantity in Input	[0,)
H NULL Pointer Dereference	[0,)
M Improper Check for Unusual or Exceptional Conditions	[0,)
H Division by zero	[0,)
M Improper Input Validation	[0,)
H Resource Exhaustion	[0,)
H Denial of Service (DoS)	[0,)
M Improper Input Validation	[0,)
H Improper Input Validation	[0,)
H Improper Input Validation	[0,)
H Improper Input Validation	[0,)
M Incorrect Calculation	[0,)
H Denial of Service (DoS)	[0,)
H Denial of Service (DoS)	[0,)
H Denial of Service (DoS)	[0,)

Package versions

4 VERSIONS IN TOTAL

version	published	direct vulnerabilities
0.9.0	7 Jan, 2023	0 C 22 H 7 M 0 L
0.8.0	8 Jul, 2022	0 C 22 H 7 M 0 L
0.7.0	10 Apr, 2022	0 C 22 H 7 M 0 L
0.6.0	7 Jan, 2022	0 C 22 H 7 M 0 L

oneflow dependencies

6 IN TOTAL

numpy pillow protobuf requests rich tqdm