search

enthec / webappanalyzer

This project aims to maintain Wappalyzer technologies
GNU General Public License v3.0
242 stars 53 forks source link

Combine efforts with HTTPArchive/wappalyzer #189

Open derekperkins opened 4 months ago

derekperkins commented 4 months ago

After lots of looking, the two most active forks are this one and https://github.com/HTTPArchive/wappalyzer. I was wondering if it made sense to join forces in a single repo.

enthec-opensource commented 3 months ago

Our goal is to keep the technologies in sync & increasing them, while maintaining legacy implementations by keeping the old wappalyzer structure; we want to keep this repo as is, with just the detectors and soon we will start releasing language based implementations for the community to use if they want...

I know httparchive reputation and i know they will keep it up, but their solution for maintenance is not what we have in mind(https://docs.google.com/document/d/1jGhvtpaatOJTh5LGcd42hyrt8lNRmK_f4PaCHf3kR_M/edit#heading=h.4qcqv7qpi4of), we want to review PR, validate all detectors with proper CI/CD, and we are working in many bots for technology discovery so we can automate as much as we can as well as programming language implementations, while having at least one person fully dedicated to it.

We truly believe that this kind of solution will work if its open source, more people will be using it, testing, reporting and contributing.

We are willing to negotiate with anyone who's trying is to help the community and try to make it as stable as possible for future-proof, we understand it's very difficult to trust a new fork owner, the quality might decrease and a strict organization is required.

RignonNoel commented 2 weeks ago

@enthec-opensource Did you already had some discussions with HTTPArchive maintainers ? I would be surprised that they don't want to go on review, CI/CD and others enhancements. They already put a lot of efforts in place in this direction and from my perspective there is a lot of duplicated works between these two repos. - Everybody is free, but it would be sad to consume human time to push two forks if a join force would be possible.

Also, you said:

[...] while having at least one person fully dedicated to it.

Are you speaking about a full-time employee ? I don't see any contributions in the last two months.