api-bola-lab Majok-Bol · PARTIAL
A deliberately vulnerable Flask REST API designed to demonstrate and practice Broken Object Level Authorization (BOLA), where authenticated users can access objects belonging to other users by manipulating object IDs.
github.com/Majok-Bol/api-bola-lab · ★ 0 · Forks 0 · Size 23 KB
SUMMARY
Technologies 14
Scored 5
Observed 5
Practices 6
Evidence 15
Skips 9
COVERAGE
Analyzed 10 files · 14 commits · 0 API calls
TECHNOLOGIES & DEPTH
Markdown LANGUAGE Depth 70
1 files · PRODUCTION
Python LANGUAGE Depth 70
2 files · PRODUCTION
pip BUILD_TOOL Depth 80
1 files · CONFIGURATION
Alembic DATABASE Depth 65
1 files · CONFIGURATION
Blinker LIBRARY Depth —
0 files · config only
Click LIBRARY Depth —
0 files · config only
Flask FRAMEWORK Depth 81
2 files · CONFIGURATION, PRODUCTION
Jinja2 LIBRARY Depth —
0 files · config only
MarkupSafe LIBRARY Depth —
0 files · config only
SQLAlchemy LIBRARY Depth —
0 files · config only
Werkzeug LIBRARY Depth —
0 files · config only
itsdangerous LIBRARY Depth —
0 files · config only
python-dotenv LIBRARY Depth —
0 files · config only
typing_extensions LIBRARY Depth —
0 files · config only
PRACTICES
documentation · observedautomated_tests · absentcontinuous_integration · absentcontainerization · absentlinting · absentformatting · absent
ACTIVITY & OWNERSHIP
First commit 2026-09-17
Last commit 2026-09-21
Active months 1
Commits 14