Cld2labs blueprints

[gopal-raj-suresh]

Description

This PR contributes Seven AI application blueprints from Cloud2 Labs to the OPEA GenAI Examples repository. Each blueprint is a complete, deployable application featuring enterprise-grade authentication (GenAI Gateway/Keycloak), documentation, and Docker-based deployment.

Applications included:

1. CodeTranslation - Multi-language code translation.
2. DocSummarization - Document and text summarization with multiple input formats.
3. MultiAgentQnA - Intelligent query routing to specialized agents (Code/RAG/Normal)
4. PdfToPodcast - PDF to podcast conversion with TTS and dialogue generation.
5. RAGChatbot - Document-based Q&A with FAISS vector store.
6. CodeGeneration - Continue VS-Code extension with enterprise GenAI Gateway(Xeon)
7. DocuGenMicroagents - Automated README generation using 9 specialized micro-agents using SLMs(Xeon).

Each application includes comprehensive README, TROUBLESHOOTING guides.

Issues

n/a

Type of change

• New feature (non-breaking change which adds new functionality)
• Others (enhancement, documentation, validation, etc.)

Dependencies

No new repository-level dependencies. Each application has its own requirements documented in respective README files.

Tests

Testing Instructions:

To test these blueprints, clone and checkout the PR branch, navigate to each blueprint to test:

git clone https://github.com/cld2labs/GenAIExamples.git
cd GenAIExamples
git checkout cld2labs-blueprints

[github-actions]

Dependency Review

The following issues were found:

• ❌ 13 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 22 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

CodeTranslation/api/requirements.txt

Name	Version	Vulnerability	Severity
python-multipart	0.0.17	Denial of service (DoS) via deformation `multipart/form-data` boundary	high
pypdf	6.1.1	pypdf possibly loops infinitely when reading DCT inline images without EOF marker	moderate
		pypdf can exhaust RAM via manipulated LZWDecode streams	moderate
		pypdf's LZWDecode streams be manipulated to exhaust RAM	moderate
		pypdf has possible long runtimes for missing /Root object with large /Size values	low
		pypdf has possible long runtimes for malformed startxref	low
requests	2.32.3	Requests vulnerable to .netrc credentials leak via malicious URLs	moderate

DocSummarization/backend/requirements.txt

Name	Version	Vulnerability	Severity
python-multipart	0.0.17	Denial of service (DoS) via deformation `multipart/form-data` boundary	high
pypdf	6.1.1	pypdf possibly loops infinitely when reading DCT inline images without EOF marker	moderate
		pypdf can exhaust RAM via manipulated LZWDecode streams	moderate
		pypdf's LZWDecode streams be manipulated to exhaust RAM	moderate
		pypdf has possible long runtimes for missing /Root object with large /Size values	low
		pypdf has possible long runtimes for malformed startxref	low
requests	2.32.3	Requests vulnerable to .netrc credentials leak via malicious URLs	moderate
Pillow	10.2.0	Pillow buffer overflow vulnerability	high
python-multipart	0.0.6	python-multipart vulnerable to Content-Type Header ReDoS	high
		Denial of service (DoS) via deformation `multipart/form-data` boundary	high
pypdf	6.1.1	pypdf possibly loops infinitely when reading DCT inline images without EOF marker	moderate
		pypdf can exhaust RAM via manipulated LZWDecode streams	moderate
		pypdf's LZWDecode streams be manipulated to exhaust RAM	moderate
		pypdf has possible long runtimes for missing /Root object with large /Size values	low
		pypdf has possible long runtimes for malformed startxref	low
requests	2.31.0	Requests `Session` object does not verify requests after making first request with verify=False	moderate
		Requests vulnerable to .netrc credentials leak via malicious URLs	moderate

PdfToPodcast/api/llm-service/requirements.txt

Name	Version	Vulnerability	Severity
python-multipart	0.0.17	Denial of service (DoS) via deformation `multipart/form-data` boundary	high
pypdf	6.1.1	pypdf possibly loops infinitely when reading DCT inline images without EOF marker	moderate
		pypdf can exhaust RAM via manipulated LZWDecode streams	moderate
		pypdf's LZWDecode streams be manipulated to exhaust RAM	moderate
		pypdf has possible long runtimes for missing /Root object with large /Size values	low
		pypdf has possible long runtimes for malformed startxref	low
requests	2.32.3	Requests vulnerable to .netrc credentials leak via malicious URLs	moderate
Pillow	10.2.0	Pillow buffer overflow vulnerability	high
python-multipart	0.0.6	python-multipart vulnerable to Content-Type Header ReDoS	high
		Denial of service (DoS) via deformation `multipart/form-data` boundary	high
pypdf	6.1.1	pypdf possibly loops infinitely when reading DCT inline images without EOF marker	moderate
		pypdf can exhaust RAM via manipulated LZWDecode streams	moderate
		pypdf's LZWDecode streams be manipulated to exhaust RAM	moderate
		pypdf has possible long runtimes for missing /Root object with large /Size values	low
		pypdf has possible long runtimes for malformed startxref	low
requests	2.31.0	Requests `Session` object does not verify requests after making first request with verify=False	moderate
		Requests vulnerable to .netrc credentials leak via malicious URLs	moderate
python-multipart	0.0.6	python-multipart vulnerable to Content-Type Header ReDoS	high
		Denial of service (DoS) via deformation `multipart/form-data` boundary	high
requests	2.31.0	Requests `Session` object does not verify requests after making first request with verify=False	moderate
		Requests vulnerable to .netrc credentials leak via malicious URLs	moderate

PdfToPodcast/api/pdf-service/requirements.txt

Name	Version	Vulnerability	Severity
python-multipart	0.0.17	Denial of service (DoS) via deformation `multipart/form-data` boundary	high
pypdf	6.1.1	pypdf possibly loops infinitely when reading DCT inline images without EOF marker	moderate
		pypdf can exhaust RAM via manipulated LZWDecode streams	moderate
		pypdf's LZWDecode streams be manipulated to exhaust RAM	moderate
		pypdf has possible long runtimes for missing /Root object with large /Size values	low
		pypdf has possible long runtimes for malformed startxref	low
requests	2.32.3	Requests vulnerable to .netrc credentials leak via malicious URLs	moderate
Pillow	10.2.0	Pillow buffer overflow vulnerability	high
python-multipart	0.0.6	python-multipart vulnerable to Content-Type Header ReDoS	high
		Denial of service (DoS) via deformation `multipart/form-data` boundary	high
pypdf	6.1.1	pypdf possibly loops infinitely when reading DCT inline images without EOF marker	moderate
		pypdf can exhaust RAM via manipulated LZWDecode streams	moderate
		pypdf's LZWDecode streams be manipulated to exhaust RAM	moderate
		pypdf has possible long runtimes for missing /Root object with large /Size values	low
		pypdf has possible long runtimes for malformed startxref	low
requests	2.31.0	Requests `Session` object does not verify requests after making first request with verify=False	moderate
		Requests vulnerable to .netrc credentials leak via malicious URLs	moderate
python-multipart	0.0.6	python-multipart vulnerable to Content-Type Header ReDoS	high
		Denial of service (DoS) via deformation `multipart/form-data` boundary	high
requests	2.31.0	Requests `Session` object does not verify requests after making first request with verify=False	moderate
		Requests vulnerable to .netrc credentials leak via malicious URLs	moderate
Pillow	10.1.0	Arbitrary Code Execution in Pillow	critical
		Pillow buffer overflow vulnerability	high
python-multipart	0.0.6	python-multipart vulnerable to Content-Type Header ReDoS	high
		Denial of service (DoS) via deformation `multipart/form-data` boundary	high
PyPDF2	3.0.1	pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character	moderate

PdfToPodcast/requirements.txt

Name	Version	Vulnerability	Severity
python-multipart	0.0.17	Denial of service (DoS) via deformation `multipart/form-data` boundary	high
pypdf	6.1.1	pypdf possibly loops infinitely when reading DCT inline images without EOF marker	moderate
		pypdf can exhaust RAM via manipulated LZWDecode streams	moderate
		pypdf's LZWDecode streams be manipulated to exhaust RAM	moderate
		pypdf has possible long runtimes for missing /Root object with large /Size values	low
		pypdf has possible long runtimes for malformed startxref	low
requests	2.32.3	Requests vulnerable to .netrc credentials leak via malicious URLs	moderate
Pillow	10.2.0	Pillow buffer overflow vulnerability	high
python-multipart	0.0.6	python-multipart vulnerable to Content-Type Header ReDoS	high
		Denial of service (DoS) via deformation `multipart/form-data` boundary	high
pypdf	6.1.1	pypdf possibly loops infinitely when reading DCT inline images without EOF marker	moderate
		pypdf can exhaust RAM via manipulated LZWDecode streams	moderate
		pypdf's LZWDecode streams be manipulated to exhaust RAM	moderate
		pypdf has possible long runtimes for missing /Root object with large /Size values	low
		pypdf has possible long runtimes for malformed startxref	low
requests	2.31.0	Requests `Session` object does not verify requests after making first request with verify=False	moderate
		Requests vulnerable to .netrc credentials leak via malicious URLs	moderate
python-multipart	0.0.6	python-multipart vulnerable to Content-Type Header ReDoS	high
		Denial of service (DoS) via deformation `multipart/form-data` boundary	high
requests	2.31.0	Requests `Session` object does not verify requests after making first request with verify=False	moderate
		Requests vulnerable to .netrc credentials leak via malicious URLs	moderate
Pillow	10.1.0	Arbitrary Code Execution in Pillow	critical
		Pillow buffer overflow vulnerability	high
python-multipart	0.0.6	python-multipart vulnerable to Content-Type Header ReDoS	high
		Denial of service (DoS) via deformation `multipart/form-data` boundary	high
PyPDF2	3.0.1	pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character	moderate
python-multipart	0.0.6	python-multipart vulnerable to Content-Type Header ReDoS	high
		Denial of service (DoS) via deformation `multipart/form-data` boundary	high

License Issues

DocuGenMicroagents/api/requirements.txt

Package	Version	License	Issue Type
langgraph-checkpoint-sqlite	>= 1.0.0	Null	Unknown License
mcp	>= 0.9.0	Null	Unknown License
python-multipart	>= 0.0.6	Null	Unknown License

CodeTranslation/api/requirements.txt

Package	Version	License	Issue Type
pypdf	6.1.1	Null	Unknown License

CodeTranslation/ui/package.json

Package	Version	License	Issue Type
lucide-react	^0.294.0	Null	Unknown License

DocSummarization/backend/requirements.txt

Package	Version	License	Issue Type
Pillow	10.2.0	Null	Unknown License
pypdf	6.1.1	Null	Unknown License

DocSummarization/frontend/package.json

Package	Version	License	Issue Type
lucide-react	^0.294.0	Null	Unknown License

DocuGenMicroagents/ui/package.json

Package	Version	License	Issue Type
lucide-react	^0.294.0	Null	Unknown License

MultiAgentQnA/api/requirements.txt

Package	Version	License	Issue Type
cryptography	>= 3.1.0	Null	Unknown License
numpy	>= 1.24.0	Null	Unknown License
pypdf	>= 3.17.0	Null	Unknown License
python-multipart	>= 0.0.6	Null	Unknown License

MultiAgentQnA/ui/package.json

Package	Version	License	Issue Type
lucide-react	^0.294.0	Null	Unknown License

PdfToPodcast/api/pdf-service/requirements.txt

Package	Version	License	Issue Type
Pillow	10.1.0	Null	Unknown License
PyPDF2	3.0.1	Null	Unknown License

PdfToPodcast/api/tts-service/requirements.txt

Package	Version	License	Issue Type
python-multipart	>= 0.0.12	Null	Unknown License

PdfToPodcast/ui/package.json

Package	Version	License	Issue Type
lucide-react	^0.294.0	Null	Unknown License

RAGChatbot/api/requirements.txt

Package	Version	License	Issue Type
cryptography	>= 3.1.0	Null	Unknown License
pypdf	>= 4.0.0	Null	Unknown License
python-multipart	>= 0.0.6	Null	Unknown License

RAGChatbot/ui/package.json

Package	Version	License	Issue Type
lucide-react	^0.294.0	Null	Unknown License

Scanned Files

• CodeTranslation/api/requirements.txt
• CodeTranslation/ui/package.json
• DocSummarization/backend/requirements.txt
• DocSummarization/frontend/package.json
• DocuGenMicroagents/api/requirements.txt
• DocuGenMicroagents/ui/package.json
• MultiAgentQnA/api/requirements.txt
• MultiAgentQnA/ui/package.json
• PdfToPodcast/api/llm-service/requirements.txt
• PdfToPodcast/api/pdf-service/requirements.txt
• PdfToPodcast/api/tts-service/requirements.txt
• PdfToPodcast/requirements.txt
• PdfToPodcast/ui/package.json
• RAGChatbot/api/requirements.txt
• RAGChatbot/ui/package.json

[alexsin368]

Will split into different PRs for each blueprint