# momosecurity/aswan

陌陌风控系统静态规则引擎，零基础简易便捷的配置多种复杂规则，实时高效管控用户异常行为。

Repository: https://github.com/momosecurity/aswan
Canonical: https://ross.abutalabs.com/products/aswan
Language: Python
License: LGPL-2.1
License Family: copyleft
Topics: risk-control, antifraud, risk-management
Last push: 2021-06-15T12:35:55+00:00

## Health v2 (maintenance only)
Score: 32/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 2637, "days_push": 1905, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 3046, forks 829 (observed 2026-08-28T04:07:39.523754+00:00)

## What it is
Aswan is Momo's open-source risk-control static rule engine, a self-hosted Python/Django service for configuring blacklist/whitelist, boolean, frequency-limit, and user-count rules to block abnormal user behavior in real time. It provides a web admin console for rule and list management and depends on MySQL, Redis, and MongoDB.

## Use cases
- block fraudulent user behavior in real time
- configure blacklists and whitelists for user IDs, IPs, and devices
- limit how many times a device can perform an action per day
- build custom risk rules without coding
- detect abnormal accounts based on login history
- manage risk-control rules across multiple projects

## When to choose
- you need a self-hosted, zero-code rule engine for anti-fraud and risk control
- you want a web console to let non-engineers configure complex risk rules
- you need dimension-based lists (user, IP, device, phone, payment account) with black/white/gray semantics

## When to avoid
- you need a full real-time streaming/ML-based fraud detection system rather than static rules
- you require active maintenance and recent releases (last release was 2021)
- your stack is not Python or you cannot operate MySQL, Redis, and MongoDB

## Facets
- artifact type: service
- maturity: maintenance
- function: security, rate-limiting, web-framework, configuration-management, logging
- domain: security, backend, web-development, developer-tools
- platform: python, self-hosted
- tags: risk-control, antifraud, rule-engine, fraud-detection, django, blacklist, whitelist, frequency-control, docker, linux, web-server

## Member repositories
- momosecurity/aswan (main) score 32

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:07:39.523754+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T07:28:56.843687+00:00, confidence not recorded.
  - readme: https://github.com/momosecurity/aswan (fetched 2026-08-28T04:07:39.523754+00:00, sha 60e1ce1c57de)
- Data as of 2026-08-30T08:39:29.467469+00:00.