15 real open-source repositories across 5 language families, each cloned at a pinned commit and baked into its own offline Docker image. Red tasks and Blue repairs are made against exactly these snapshots.
| Repository | Language | Source | Pinned commit |
|---|---|---|---|
| flask | Python | pallets/flask ↗ | 7fff56f5172c3.1.1 |
| jinja | Python | pallets/jinja ↗ | 15206881c0063.1.6 |
| sqlalchemy | Python | sqlalchemy/sqlalchemy ↗ | 5237d923ddb0rel_2_1_0b2 |
| helmet | TypeScript | helmetjs/helmet ↗ | 638e43becc81v8.2.0 |
| expressjs | JavaScript | expressjs/express ↗ | dbac741a49a5v5.2.1 |
| node-jsonwebtoken | JavaScript | auth0/node-jsonwebtoken ↗ | ed59e76ea37av9.0.3 |
| chi | Go | go-chi/chi ↗ | 3b171578ca44v5.3.0 |
| csrf | Go | gorilla/csrf ↗ | 9dd6af1f6d30v1.7.3 |
| jwt | Go | golang-jwt/jwt ↗ | 7ceae619e739v5.3.1 |
| java-html-sanitizer | Java | owasp/java-html-sanitizer ↗ | 4e186b8a8c84release-20260313.1 |
| java-jwt | Java | auth0/java-jwt ↗ | 695fd2bea64b4.5.2 |
| jjwt | Java | jwtk/jjwt ↗ | 0df975627c2c0.12.6 |
| cjson | C | davegamble/cjson ↗ | c859b25da029v1.7.19 |
| libexpat | C | libexpat/libexpat ↗ | c61098da494eR_2_8_2 |
| simdjson | C++ | simdjson/simdjson ↗ | 1bcf71bd8505v4.6.4 |