Platform Dependencies & Open Source Licenses

This page lists FOX-specific dependencies and integrations that extend upstream CTFd.

Upstream CTFd Dependencies

Core CTFd dependencies and standard framework components are documented upstream:

This page intentionally avoids repeating those baseline dependencies.

FOX Infrastructure Additions

Traefik v3.6

License: MIT
Purpose: Reverse proxy and load balancer
Website: https://traefik.io

FOX Python Dependencies

Authentication & Security

Authlib >= 1.6, < 2

License: BSD-3-Clause
Purpose: OAuth 2.0 and OpenID Connect implementation
Repository: https://github.com/lepture/authlib
Used in: SSO Manager plugin

bcrypt >= 4.0.1, < 5.0.0

License: Apache License 2.0
Purpose: Password hashing
Repository: https://github.com/pyca/bcrypt
Used in: Containers plugin

Infrastructure Management

docker == 7.1.0

License: Apache License 2.0
Purpose: Docker SDK for Python
Repository: https://github.com/docker/docker-py
Used in: Containers plugin, initialization scripts

paramiko

License: LGPL v2.1
Purpose: SSH protocol implementation
Repository: https://github.com/paramiko/paramiko
Used in: Containers plugin for remote Docker connections

APScheduler

License: MIT
Purpose: Task scheduling library
Repository: https://github.com/agronholm/apscheduler
Used in: Containers plugin for container lifecycle management

Configuration & Data Parsing

ruamel.yaml == 0.18.16

License: MIT
Purpose: YAML parser and emitter
Repository: https://sourceforge.net/projects/ruamel-yaml/
Used in: Course configuration parsing

requests == 2.32.5

License: Apache License 2.0
Purpose: HTTP library
Repository: https://github.com/psf/requests
Used in: API calls and setup scripts

FOX Testing Dependencies

pytest == 8.3.4

License: MIT
Purpose: Testing framework
Repository: https://github.com/pytest-dev/pytest

pytest-cov == 6.0.0

License: MIT
Purpose: Coverage plugin for pytest
Repository: https://github.com/pytest-dev/pytest-cov

pytest-timeout == 2.3.1

License: MIT
Purpose: Test timeout plugin
Repository: https://github.com/pytest-dev/pytest-timeout

pytest-mock == 3.14.0

License: MIT
Purpose: Mocking plugin for pytest
Repository: https://github.com/pytest-dev/pytest-mock

httpx == 0.28.1

License: BSD-3-Clause
Purpose: Async HTTP client
Repository: https://github.com/encode/httpx

responses == 0.25.3

License: Apache License 2.0
Purpose: Mock HTTP responses
Repository: https://github.com/getsentry/responses

coverage == 7.6.9

License: Apache License 2.0
Purpose: Code coverage measurement
Repository: https://github.com/nedbat/coveragepy

FOX Tooling

ctfcli == 0.1.5

License: Apache License 2.0
Purpose: CTFd command-line interface
Repository: https://github.com/CTFd/ctfcli
Used in: Challenge deployment

License Compliance

All FOX-added libraries used in this platform are open-source and compatible with the Apache License 2.0 under which CTFd is distributed. The platform respects all license requirements including:

Attribution: All libraries are properly credited
License Preservation: Original licenses are maintained
Copyleft Compliance: GPL/LGPL components (MariaDB, Paramiko) are used as separate services/libraries without modifying their source code

Plugin-Specific Dependencies

SSO Manager Plugin

Authlib >= 1.6, < 2 (BSD-3-Clause)

Containers Plugin

docker (Apache 2.0)
paramiko (LGPL v2.1)
APScheduler (MIT)
bcrypt >= 4.0.1 (Apache 2.0)

Account Deletion Plugin

Built-in CTFd dependencies only

Custom Scoreboard CSV Export Plugin

Built-in CTFd dependencies only

Email Notification Plugin

Built-in CTFd dependencies only

Copied or Adapted Code Provenance

This section documents code in FOX that is copied from or adapted from external projects.

SSO Manager Plugin (`plugins/sso_manager`)

Status: Adapted from an existing project, not written from scratch in FOX
Upstream project name: CTFd-SSO-plugin
Upstream repository URL: Not declared in the local plugin README; project lineage is inferred from the retained project name and installation text.
Evidence in this repository:
- The plugin README title is CTFd-SSO-plugin
- Installation text references the plugin directory name CTFd-SSO-plugin
FOX-specific adaptations (non-exhaustive):
- Integration with FOX logging and admin workflows
- UI and endpoint hardening/validation for FOX deployment needs

Containers Plugin (`plugins/containers`)

Status: Imported/adapted plugin
Primary upstream: https://github.com/phannhat17/CTFd-Docker-Plugin
Declared lineage in plugin README: "upgrade of andyjsmith's plugin" (https://github.com/andyjsmith/CTFd-Docker-Plugin)
FOX-specific adaptations (documented in plugin README):
- Flag-sharing detection behavior changed for FOX (container removal + admin review flow)
- Compatibility and operational adjustments for FOX infrastructure

Custom Scoreboard CSV Export Plugin (`plugins/custom_scoreboard_csv_export`)

Status: FOX plugin that overrides and customizes CTFd scoreboard CSV behavior
Upstream logic basis: CTFd scoreboard CSV export flow (dump_scoreboard_csv behavior)
FOX-specific adaptations:
- Additional export columns (for users and teams)
- Non-invasive override via plugin registration without modifying CTFd core source files

Other FOX Plugins

plugins/account_deletion: No external upstream/fork attribution declared in repository documentation.
plugins/page_manager: No external upstream/fork attribution declared in repository documentation.

If additional copied/adapted components are identified later, they should be added here with the same level of detail (upstream URL, scope of copied code, and FOX-specific modifications).

Source Code

The FOX platform source code is available at: Repository: https://git.cs.uni-paderborn.de/syssec/teaching/pgs/2025-fox/fox

Last Updated: April 2026
For questions about dependencies or licenses, please contact the platform administrators.