Explore Projects

My idea for this GSoC period is basically about improving the UI/UX of the admin portal and making it according to the design standards that are defined in talawa docs, also I will make it mobile responsive. Another focus I have this summer is to make all the screens (components) of talawa-admin functional i.e. No more hard-coded values in the admin portal, all the data will be live from talawa-API. I will also implement a way so that users can select or use talawa-admin in their preferred language and I will be implementing a feature for detecting whether a user is spamming a chat or not. Below are the features for talawa-admin that I am going to add this summer that will boost its usability, user experience, and its use cases. Talawa-admin Features: Interactive UI/UX. Multiple screens (Mobile or Tablet) are responsive. Functional screens (components). Implementing the support for different languages. Feature to detect whether the user is spamming the chat or not. Migration from redux-routing to react-routing. *

<p>Adding support in Kubernetes Client for several types of Resources: ServiceCatalog TemplateInstance VolumeAttachment CertificateSigningRequest SelfSubjectAccessReview SelfSubjectRulesReview TokenReview ControllerRevision UserInfo AdmissionConfiguration</p> <p>Providing test coverage for the following resources: Endpoints PersistentVolumeClaim PersistentVolumes SubjectAccessReview PodPreset HorizontalPodAutoscaler Namespace ResourceQuota</p>

This project adds LAPACK bindings and JavaScript implementations for singular value decomposition in stdlib, with the main focus on the dgesvd routine (singular value decomposition (SVD) for GE matrices) along with several dependency routines. My plan is to implement the missing LAPACK dependencies in stdlib, port the core routines to stdlib’s ndarray/base API style, for both row-major (C-style) and column-major (Fortran-style) arrays and verify correctness against the Fortran reference implementations. The main deliverable is a working dgesvd implementation, the stretch goal is a working dgesvdq branch. Each routine will also include tests, benchmarks, examples, and documentation so the final result is a working SVD module in stdlib via LAPACK.

This proposal aims to integrate Scala 3 support into the Scala Webapp Template, providing a more accessible, reliable, and powerful solution for developers interested in building web applications using Scala and Scala.js. The integration will involve updating the backend and frontend code to utilize new syntax and features of Scala 3, ensuring compatibility with existing Scala 2.13 code through cross-compilation, and updating libraries and dependencies as necessary. The proposed approach also includes testing, documentation, and optimization of the updated components.

<p>SwellRT is a full-stack framework for developing decentralized real-time collaborative apps in JavaScript/Java/Android. It is based upon Apache Wave protocol formerly known as Google Wave protocol. This protocol is implemented over an XMPP transport layer. Our project aims to change to matrix protocol which is better suited for our requirements.</p>

<p>To expand SFK labs impact I propose, inspired by the project authors, the addition of a component that allows the user to visualize the source code of the current lab and via an embedded text editor, and interactively play with a sandbox environment that allows for code fixing and testing. The users are provided with the ability to not only exploit the vulnerability, but visualize the underlying source of the security issue and attempt to fix it. This fixing feature verifies the user solution for inconsistencies in syntax, and after proving that the service won’t be crashed by the changes, run the newly modified version overriding the original one. In this way we enable the user to dynamically test for the secure code fragment that fixes the root cause of the issue exemplified in the lab.</p>

Macro is a metaprogramming feature that allows programmers to analyze and synthesize code at compile-time. Scala 3 supports a powerful yet type-safe macro system that allows analysis of the structure of code fragments via quote pattern matching. In this project, we aim for two goals: 1. The current implementation of quote pattern matching does not have many tests and is expected to be unstable. I propose making the feature more reliable by creating a checklist that captures which language features should be supported and adding more automated tests based on the checklist. 2. The current quote pattern matching does not support extraction of polymorphic functions. I propose extending HOAS patterns to support pattern matching against polymorphic functions based on formal definitions.

Doodle is a Scala library for 2D graphics, animation, data visualization, and creative coding. It supports JVM-based applications, utilizing Java2D for rendering, and for web browsers through SVG support. The library operates on a principle of composition (i.e Retained mode), enabling users to craft visuals by combining various elements. Doodle supports differences between backends through its tagless final architecture. Doodle currently supports retained mode graphics. Retained mode graphics involve representing the image as a data structure, creating a hierarchy of elements where each element relates to others. While this facilitates expressing parts of the image in terms of others, it poses challenges with large numbers of elements, making alignment difficult and memory usage proportional to the number of elements. On the other hand, immediate mode graphics represent the image as a function for drawing it. This method consumes memory proportional to the algorithmic complexity (Kolmogorov complexity) of describing the image. In immediate mode, we can have a single drawing context and can be used for high volume graphics. This enhancement will allow for more interactive experiences, opening up new possibilities for creative expression and application development. Further on, we wish to add advantages of the immediate mode, while retaining the advantages of retained mode. Combining both the methods can be very crucial for the developer willing to involve both the modes in a single method.

<p>Complete support for <a href="https://github.com/openshift/origin" target="_blank">OpenShift</a> and <a href="https://github.com/kubernetes/kubernetes" target="_blank">Kubernetes</a> as a backend in <a href="https://github.com/fedora-modularity/conu" target="_blank">conu</a></p>

<h3>Project Description</h3> <p>GoCloud is a golang library which hides differences between different cloud providers' APIs and allows you to manage different cloud resources through a unified and easy to use API.</p> <h3>The Problem</h3> <p>GoCloud only supports AWS and GCP now. More services need to be implemented, such as Azure, Ali-cloud, Digital Ocean, and Rackspace .</p> <p>Our task is to implement the major services of these cloud service provider in the GoCloud. I want to implement the services of Ali-cloud and Rackspace.</p>

The Doodle library for compositional vector graphics can be further improved by adding support for coordinate planes, the grid, legend, labels and titles, including the x-axis label, y-axis label, and plot title, which will simplify graph analysis. With the support of my mentor and the community, I will implement the plotting functionality in Doodle, improving the ability to visualize, compare and explore data. Moreover, the improved plotting capabilities will make the presented data easier to understand and more accessible to a wide audience. The project itself can be divided into three separate deliverables: 1) Plotting API: it’s necessary to define a plotting API that will allow users to create various plots, customize them, and perform data transformations. The API should be flexible and extensible, allowing users to easily add new types of plots, customize the appearance and layout, and apply different data transformations. To achieve these goals, we will use the tagless final style and composition, which enables us to combine multiple interfaces. 2) Graph Adjustments Support: these features can help improve the clarity and usefulness of the plots and graphs we create. These features include axis limits, line width, marker style, transparency, color scheme, legends, annotations, axis scale, aspect ratio, etc. 3) Documentation: in addition to written documentation, we will provide visual examples and demos that are extremely helpful in illustrating how to use the API. Providing code snippets and sample plots will help users get started quickly and provide a foundation for more advanced usage.

<p>This project involves making a well-structured and easy to access web service, fetching data from other third-party services. As each third-party has its own format and method of providing the service, it becomes difficult for the Application Developers to fetch data from each one of them. This project will provide the developers with a common endpoint for various useful services, hence making the developers’ work easier. The service should be in the form of a REST-like API, which will be well-documented to help in future growth of the Service. The services that will be achieved during this year's project are -</p> <ul> <li>Dictionary Service</li> <li>Language Translation Service</li> </ul>

This project involves extending the Feral library to support more cloud providers, specifically Google Cloud and Vercel, in addition to AWS Lambda, as well as improving the existing support for AWS Lambda.

<p>Adding end-to-end encryption to libqmatrixclient for future support in Qt/libqmatrixclient-based client like Quaternion.</p>

This project aims to improve the way Scautable handles CSV files by making structured data parsing in Scala more robust, flexible, and user-friendly — especially for data exploration and quick scripting tasks. Key problems being addressed include poor handling of row/column mismatches, limited support for malformed or missing headers and lack of custom delimiter options. Inspired by the usability of Pandas, this proposal introduces enhancements such as configurable error-handling modes (e.g., skip or autofill bad lines), support for automatic or custom headers, smarter handling of duplicate or malformed columns, and flexible delimiter parsing. For large files, methods to access specific columns will be distributed across implicit classes to avoid JVM method count limitations, improving scalability. Additionally, clear error messages and diagnostics will guide users through common issues and edge cases. By addressing these aspects, the project will significantly improve Scautable’s reliability and make it a more powerful tool for developers working with structured data in Scala.

<p>The library shapeless is found everywhere in the Scala ecosystem, helping people do metaprogramming and typeclass derivation without using macros directly, which would otherwise be required. A new version of the Scala language, Scala 3, is removing macros in their old form, but also providing new tools for typeclass derivation and meta programming. A new version of shapeless exists for Scala 3, but porting code written for shapeless 2 is not trivial.</p> <p>The goal of this project is to cross compile the old version of shapeless to Scala 3, in such a way that end users do not have to change anything about their code for it to continue to work. I will focus primarily on the core metaprogramming features shapeless provides. I will tackle lesser used features if it is feasible to support them, and as long as there is enough time to not impede on the major features.</p> <p>This will hugely benefit a large portion of the Scala community because of how many things depend on Shapeless. If Shapeless 2 does not exist on Scala 3, it will mean that many projects will wait much longer to update to Scala 3, and a lot of new code has to be written to support Scala 3, both in applications and libraries.</p>

<p>Libreswan itself currently only supports RSA as Digital Signature Authentication method, so it needs to be extended internally as well to be able to use other methods, such as ECDSA or EDDSA. Implementation of ECC/ECDSA requires the modification of the existing Libreswan public key code to fix the RSA only parts so that it is able to accept different new types of keys in the future ( not just limited to EDDSA ). Libreswan will then be compliant to RFC-7427 and RFC-8247.</p>

Leverage OCI hooks to obtain container start/stop events and container details for KubeArmor, replacing the current UNIX domain socket file method. Integrate Podman support for unorchestrated environments, ensuring policy enforcement and alerts/telemetry validation. Design the implementation to gather necessary container information and verify functionality with Podman as well as Containerd without Unix Socket. Expected Outcome: Work with Podman in rootless mode and Eliminate exposing UNIX domain sockets for other container runtimes

This project focuses on enhancing the scanning capabilities of Nettacker by introducing payload-based probing techniques for service detection. By sending protocol-aware probes instead of generic requests, the scanning engine will be able to identify running services more accurately and extract version information where possible, significantly improving reconnaissance capabilities. Overall, the proposed improvements will strengthen Nettacker's ability to perform reconnaissance scan and vulnerability discovery while expanding its coverage of vulnerabilities listed in the CISA Known Exploited Vulnerabilities (KEV) catalog and improving test coverage.

<p>OAST stands for Out-of-band Application Security Testing and is used to detect Out-Of-Band (OOB) vulnerabilities, which is not possible to do with a traditional HTTP request-response interaction. Although ZAP offers excellent DAST capabilities, it falls short when it comes to OAST.</p> <p>This project aims to fill this gap. It will focus on integrating the <a href="https://github.com/marcoagner/boast" target="_blank">BOAST</a> service with ZAP via an add-on. Relevant OOB payloads sent to the target will allow BOAST to capture and process generated requests, enabling ZAP to detect and report on a new class of vulnerabilities.</p>

This proposal aims to strengthen stdlib’s linear algebra capabilities by implementing LAPACK-based solve routines for structured matrix formats such as packed, banded, and tridiagonal systems, which are widely used in scientific and engineering applications. The project focuses on enabling a complete factorization-to-solution workflow, ensuring seamless integration with existing routines while carefully handling specialized storage formats that require precise indexing and memory management. Emphasis will be placed on numerical correctness, consistency with stdlib’s APIs, and robustness through comprehensive testing and validation. Clear documentation and practical examples will also be provided to improve usability, ultimately making stdlib a more reliable and effective toolkit for real-world scientific computing.

<p>OWASP DefectDojo is an open source vulnerability management tool and it's used as the backbone for security programs. It helps you keep proper record and management of your Product Testing Engagements for easy review and recall. It is easy to get started with and to work on!</p>

Refactor the client JavaScript/TypeScript RPC client to utilize zero-allocation binary parsing and WebSocket state cache.