# creditease-sec/insight

洞察-宜信集应用系统资产管理、漏洞全生命周期管理、安全知识库管理三位一体的平台。

Repository: https://github.com/creditease-sec/insight
Canonical: https://ross.abutalabs.com/products/insight
Language: JavaScript
License: GPL-3.0
License Family: copyleft
Archived: true
Last push: 2021-01-12T03:02:14+00:00

## Health v2 (maintenance only)
Score: 10/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 0, release rhythm 35, longevity 100
- inputs: {"age_days": 3079, "days_push": 2059, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases, archived
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1181, forks 441 (observed 2026-08-28T04:03:54.110387+00:00)

## What it is
Insight is a self-hosted security management platform from CreditEase that combines application system asset management, full vulnerability lifecycle management, and a security knowledge base. It is built with Python/Flask and MySQL, deployed via Docker, and has been superseded by Insight2.

## Use cases
- manage company application system assets with owners and risk levels
- track security vulnerabilities from submission through remediation and retest
- calculate vulnerability risk scores and fix deadlines automatically
- send email reminders for pending vulnerability fixes
- build an internal security knowledge base for training and onboarding
- generate statistics and reports on security risk trends

## When to choose
- you need an all-in-one vulnerability lifecycle and asset management platform for an internal security team
- you want role-based workflows for security staff, developers, and administrators
- you prefer a Docker-deployable self-hosted solution with email notifications and analytics

## When to avoid
- you need an actively maintained project - this repo is deprecated in favor of insight2
- your stack requires modern Python (this depends on Python 2.7 and old Flask/MySQL versions)
- you need cloud-native or multi-tenant SaaS vulnerability management

## Facets
- artifact type: application
- maturity: abandoned
- function: security, monitoring, workflow-automation, documentation
- domain: security, developer-tools, self-hosted
- platform: self-hosted, python
- tags: vulnerability-management, asset-management, security-knowledge-base, vulnerability-lifecycle, security-operations, python2-legacy, docker, web-server

## Member repositories
- creditease-sec/insight (main) score 10

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:54.110387+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:25:01.348128+00:00, confidence not recorded.
  - readme: https://github.com/creditease-sec/insight (fetched 2026-08-28T04:03:54.110387+00:00, sha 9c8d44cd8a85)
- Data as of 2026-08-30T08:39:29.467469+00:00.
