redballoonsecurity / redballoonsecurity/ofrak

binwalk upstream unmaintained (consider gentoo fork?)

Open
#482 1 comment 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
2.1k
Forks
156
PR merge metrics
No merged PRs in 30d

Description

The upstream repository of binwalk is more or less unmaintained since being bought by Microsoft. There was one critical security patch merged last year but that's it. See https://github.com/ReFirmLabs/binwalk/issues/671

gentoo maintainers created a fork that is receiving updates still at https://github.com/OSPG/binwalk , should we consider switching to using that one?

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Review how OFRAK currently uses binwalk, then read the upstream issue 671 and compare the maintenance status and compatibility of ReFirmLabs/binwalk with OSPG/binwalk. Done means reaching a documented decision about whether to switch forks and identifying the integration work required if the fork is adopted.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
reverse-engineering, tooling
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.