Apache Podling Website Checks

Checking Podling Websites for required and disallowed content

NOTE: most podlings may not pass these checks yet during incubation - but they are expected to pass them before graduation.

This script periodically crawls all Apache project and podling websites to check them for a few specific links or text blocks that all projects are expected to have. The checks include verifying that all required links appear on a project homepage, along with an "image" check if project logo files are in apache.org/img

The script also checks for 3rd party resource references that might be in conflict with our privacy policy.

The Content-Security-Policy (Csp) check is a work in progress: it only checks that the default settings have not been over-ridden. It does not check if the host exceptions have been approved.

View the crawler code, website display code, validation checks details, and raw JSON data.
Last crawl time: Wed, 14 Oct 2026 02:11:24 GMT over 22 websites.

Site Check Of Type - Csp_check

Check Results Text of a link expected to match regular expression: ^OK
Websites must not replace the default Content-Security-Policy
  • Click column badges to sort
  • Podling Check Results
    18 3 1
    Amoro OK
    BifroMQ OK
    Burr OK
    Caldera OK
    Casbin Extras: https://giscus.app/
    Cloudberry Invalid: default-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/; script-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://widget.kapa.ai https://hcaptcha.com https://*.hcaptcha.com; connect-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://proxy.kapa.ai https://metrics.kapa.ai https://kapa-widget-proxy-la7dkmplpq-uc.a.run.app https://hcaptcha.com https://*.hcaptcha.com; style-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://hcaptcha.com https://*.hcaptcha.com; frame-src 'self' data: blob: 'unsafe-inline' 'unsafe-eval' https://www.apachecon.com/ https://www.communityovercode.org/ https://*.apache.org/ https://apache.org/ https://hcaptcha.com https://*.hcaptcha.com; frame-ancestors 'self'; worker-src 'self' data: blob:;
    Fesod OK
    GeaFlow OK
    GraphAr OK
    Hamilton OK
    KIE OK
    NullAway
    OpenServerless OK
    Ossie OK
    Otava OK
    OzHera OK
    Pegasus OK
    PouchDB OK
    Seata Extras: https://*.github.com/
    Texera OK
    Toree OK
    XTable OK