django-celery-expert
Audited by Socket on Sep 14, 2026
2 alerts found:
Anomalyx2No malicious behavior is evident. The material is legitimate Celery deployment documentation. Security concerns include shell command interpolation from EnvironmentFile values, publicly exposed Redis in one Compose example, unauthenticated Flower exposure, mutable image tags, unverified dependency installation, and broad operational shutdown commands. These require hardening before production use but do not indicate malware.
The code is legitimate Celery monitoring and alerting guidance and shows no clear malware or intentional sabotage. Its principal risks are insecure example deployment settings, possible exposure of broker and Flower interfaces, plaintext credential examples, and leakage of sensitive task data through logs and external alert payloads. Use environment or secret-manager configuration, TLS and authentication, network restrictions, payload redaction, and correct the heartbeat age calculation.