PAGES
← all tools
◆ Reconnaissance & OSINT

Maigret

v0.6.6 open-source

Collect a dossier on a person by username from 3000+ sites

Summary

Maigret is an open-source OSINTOSINTOpen-source intelligence, collecting and analyzing information from publicly available sources. Investigators use it to learn about people, infrastructure or threats. command-line tool that builds a dossier on a person from a username alone, checking it against a large database of sites and pulling whatever profile data those pages expose, with no API keys required. It is run from the command line, with an optional Docker web image for self-hosted deployment, and can be scripted into automation pipelines as well as invoked as a library. It targets OSINT researchers and pentesters who need to map a person's footprint across social media, crypto, and other platforms from a single alias. It sits in the reconnaissance and username-enumeration space, extending searches with permutated username variants, Cloudflare-bypass mechanisms, and export to Neo4j for link analysis. First committed in 2020, it has 83 contributors and remains active, with over 500 commits and a release just 39 days ago.

Collect a dossier on a person by username from 3000+ sites

How Maigret helps

Which accounts across the internet belong to the same person as this username?

checks the alias against its full site database and returns every matching profile it finds, pulling whatever bio, avatar, or activity data those pages expose

Which crypto-related identities trace back to this alias?

filters its site database down to sites tagged crypto — ENS domains and similar blockchain identity lookups — and reports which ones resolve for the username

Are any of the matches actually a different person with the same name?

narrows results to profiles whose page text contains keywords you supply, so a common name can be filtered down to the account that is actually the target

How do I turn a list of discovered accounts into a link-analysis graph?

exports the findings as a Neo4j Cypher file, so the accounts and their relationships can be loaded straight into a graph database

Which sites are blocking this search outright?

flags sites it detects as Cloudflare-protected and routes those checks through a bypass mechanism, rather than silently returning them as not-found

What other usernames might the same person be using?

generates permutated variants of the given alias and searches those too, surfacing accounts registered under close variations of the original name

all 20 features, with the evidence for each →

Languages

Chinese (Simplified), French Documentation: Chinese (Simplified), French

Features

20 capabilities across 6 areas · 2 backed by code, an API document or a real run

Built from Maigret's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

What Maigret offers you

  • Web management console1
  • Command-line interface
Username and identifier search 3 capabilities The core function of the cyber tool is locating online accounts by searching a username or alternative identifier across a large catalogue of sites. Filters for tags, keywords, country, and topic let the user narrow which sites are checked.
Username search across social platforms verified Searches for a username across hundreds of sites, with options to filter by keyword, tag, country, or topic. 10 releases · 13 other sources · first seen Sep 2022

release 10 total

  • Supports --input-file to read identifiers from a file for batch scans v0.6.6 · Sep 2026 · source · release history
  • XenForo engine now counts Hebrew and Persian login-wall notices as account presence, reducing false available reports on boards in those languages. v0.6.6 · Sep 2026 · source · release history
  • Adds --input-file flag to read identifiers from a file, one per line, instead of listing them all on the command line.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ v0.6.6 · Sep 2026 · source · release history
  • Adds 78+ new sites to the username-search database across multiple batch additions, including VNOJ (Vietnamese competitive programming), Juejin, NetEase Music, Coddy, and Codédex. v0.6.5 · Aug 2026 · source · release history
  • Tags 2,210 sites in the database by country and topic, enabling more targeted scans with --tags. v0.6.4 · Aug 2026 · source · release history
  • Adds --keywords flag to filter results by matching keywords found in profile pages. v0.6.2 · Jul 2026 · source · release history

docs 8 total

  • Welcome to the Maigret docs! View page source Welcome to the Maigret docs!  Maigret is an easy-to-use and powerful OSINT tool for collecting a dossier on a person by a username (alias) only. This is achieved by checking for accounts on a huge number of sites and gathering all the available information from web pages. seen 20260714T1 · source
  • This checks all 5,200 sites. A match on GitHub, Reddit, or a forum can reveal the person behind the wallet. seen Sep 2026 · source
  • Identifiers from a file --input-file ids.txt Reads identifiers from a file, one per line, and searches them exactly like positional ones. A single as the path reads standard input instead, so a generator can be piped straight in. Blank lines and lines starting with are skipped. docs update · Sep 2026 · source
  • Code signing Windows binaries are built on GitHub Actions from this repository. The project has applied to the SignPath Foundation _ for a free code signing certificate; once issued, released Windows binaries will be signed as part of the same automated build. seen Sep 2026 · source
  • Code signing Windows binaries are built on GitHub Actions from this repository. The project has applied to the SignPath Foundation for a free code signing certificate; once issued, released Windows binaries will be signed as part of the same automated build. seen Sep 2026 · source
  • channel for amd64 and arm64. Uploading a revision does not touch the store listing: the summary, the description and the icon change only when upload-metadata <snap-file> is run, so run it whenever those fields change in snap/snapcraft.yaml , or the store keeps serving the old text. seen Sep 2026 · source

command line

  • --input-file — Read identifiers from a file, one per line ('-' for stdin). A line can carry its own id type, e.g. vk_id:12345. v0.6.6 · Sep 2026 · command-line history
  • --limit — Max sites per kind (default: 40) v0.6.4 · Aug 2026 · command-line history

example

  • Narrow a username search to profiles that mention specific keywords — useful for confirming identity across common-name accounts. maigret johndoe --keywords hacker,security v0.6.2 · Jul 2026 · source
  • Narrow results to profiles that mention a specific keyword, cutting noise during targeted investigations. maigret <username> --keywords hacker v0.6.2 · Jul 2026 · source
  • Search three usernames on all sites maigret user1 user2 user3 -a
Non-username identifier lookups shipped Looks up profiles using non-username identifiers such as numeric or platform-specific IDs, automatically limiting the search to sites that accept that identifier type. 5 releases · 5 other sources · first seen Jul 2026

release

  • Adds QQ account search via the qq_id identifier type, enabling lookup of QQ users alongside usernames. v0.6.4 · Aug 2026 · source · release history
  • Adds qq_id id type to scan for QQ profiles v0.6.4 · Aug 2026 · source · release history
  • Adds support for Bilibili account lookup. v0.6.4 · Aug 2026 · source · release history
  • Adds ORCID as a supported site for academic researcher identity lookups. v0.6.2 · Jul 2026 · source · release history
  • Adds ORCID as a supported lookup site, enabling researcher identity searches. v0.6.2 · Jul 2026 · source · release history

docs

  • qq_id - QQ (Tencent) numeric account number, also used as the Qzone profile id. bilibili_id - Bilibili numeric user id (the mid in a space.bilibili.com/{mid} profile URL). Example Pass the identifier as the target and select its type with --id-type . docs update · Jul 2026 · source
  • Supported types: gaia_id, steam_id, vk_id, yandex_public_id, ok_id, wikimapia_uid, uidme_uguid, yelp_userid, orcid, qq_id, bilibili_id. Sites whose type does not match are filtered out automatically. See Supported identifier types for details and an example. docs update · Jul 2026 · source
  • Supported types: gaia_id, steam_id, vk_id, yandex_public_id, ok_id, wikimapia_uid, uidme_uguid, yelp_userid, orcid, qq_id, bilibili_id. Sites whose type does not match are filtered out automatically. See :ref:supported-identifier-types for details and an example. seen Jul 2026 · source
  • - qq_id - QQ (Tencent) numeric account number, also used as the Qzone profile id. - bilibili_id - Bilibili numeric user id (the mid in a space.bilibili.com/{mid} profile URL). Example ------- Pass the identifier as the target and select its type with --id-type. docs update · Jul 2026 · source

example

  • Scan for accounts linked to a QQ ID using the new id type maigret --qq_id <qq_account_id> v0.6.4 · Aug 2026 · source
Site filter tag matching shipped Filters the site database by tags so the user can include or exclude specific categories of sites from a search. 2 releases · 1 other source · first seen Aug 2025

release

  • Makes --include-tag site filter case-insensitive, matching the existing --exclude-tag behavior. v0.6.2 · Jul 2026 · source · release history
  • Makes the --include-tag site filter case-insensitive, matching the existing exclude-tag behavior. v0.6.2 · Jul 2026 · source · release history

example

  • Limit a search to crypto-related sites (ENS and similar domains) using the crypto tag. maigret --tags crypto johndoe v0.5.0 · Aug 2025 · source
Site database and coverage 1 capability The cyber tool maintains a built-in database of sites against which searches are run, covering mainstream platforms, Chinese-language services, Discourse forums, and Tor hidden services. This database determines the breadth of any search.
Site database coverage shipped suggested Maintains a database of searchable sites that includes international and non-ASCII platforms, Tor onion sites, and Discourse-based forums. 18 releases · 2 other sources · first seen Jan 2022

Suggested capability: Attack surface inventory. This is our guess, not confirmed.

release 18 total

  • Adds 6 Chinese sites with presence markers, expanding coverage for OSINT investigations targeting Chinese-language platforms. v0.6.5 · Aug 2026 · source · release history
  • Keeps runtime activation tokens out of the sites database, preventing credential leakage in the distributed data.json. v0.6.5 · Aug 2026 · source · release history
  • Adds per-site encoding config to control character encoding for specific sites v0.6.4 · Aug 2026 · source · release history
  • Adds per-site encoding configuration to the site database, allowing correct handling of non-ASCII identifiers. v0.6.4 · Aug 2026 · source · release history
  • Adds 32 new sites to the database (21 in one batch, 11 in another), plus CSDN for Chinese-language username lookups. v0.6.4 · Aug 2026 · source · release history
  • Adds support for a new DiscourseJson detection engine, broadening coverage of Discourse-based community forums. v0.6.3 · Jul 2026 · source · release history

docs

  • This checks all 5,200 sites. A match on GitHub, Reddit, or a forum can reveal the person behind the wallet. seen Sep 2026 · source

example

  • Configure encoding for a specific site to handle non-ASCII usernames correctly maigret --per-site-encoding <site_name>=<encoding> v0.6.4 · Aug 2026 · source
Profile enrichment and link analysis 2 capabilities Once accounts are found, the cyber tool can fetch additional data from secondary endpoints and export relationships to a graph database for deeper analysis. This turns a flat list of discovered profiles into a connected picture of an identity.
Graph database export (Neo4j) shipped Exports results as a Neo4j Cypher file so discovered accounts and relationships can be explored in a graph database. 4 releases · 3 other sources · first seen Feb 2021

release

  • Adds status_code check creation to the --submit fallback: when a claimed profile returns 2xx and the unclaimed probe returns non-2xx, that signal is now preserved. v0.6.6 · Sep 2026 · source · release history
  • Adds --neo4j flag to export results as a Neo4j Cypher file for graph-based OSINT analysis. v0.6.2 · Jul 2026 · source · release history
  • Adds --neo4j flag to export search results as a Neo4j Cypher file for graph database ingestion. v0.6.2 · Jul 2026 · source · release history
  • Adds JSON export format for results v0.1.14 · Feb 2021 · source · release history

example

  • Export OSINT findings directly into Neo4j for graph-based link analysis across discovered accounts. maigret johndoe --neo4j v0.6.2 · Jul 2026 · source
  • Export a username search as a Neo4j Cypher graph for visualising cross-platform connections in a graph database. maigret <username> --neo4j v0.6.2 · Jul 2026 · source
  • Export Maigret scan results in JSON format for easier parsing or integration with other tools. maigret <username> --json v0.1.14 · Feb 2021 · source
Profile enrichment via secondary endpoints verified Fetches additional data from secondary endpoints linked to discovered profiles and merges the extracted fields and linked accounts into the results. 3 releases · 2 other sources · first seen Feb 2021

release

  • Adds enrichment via socid_extractor URL mutations, extracting more linked accounts and IDs from profile pages during recursive search. v0.6.4 · Aug 2026 · source · release history
  • Enables enrichment via socid_extractor url mutations for additional identity data v0.6.4 · Aug 2026 · source · release history
  • Activates username parsing in Spotify userinfo links v0.1.14 · Feb 2021 · source · release history

command line

  • --enrich — Fetch secondary API/JSON endpoints derived from profile URLs (via socid_extractor url_mutations) and merge extracted fields into results. Off by default; adds extra HTTP requests per claimed site. v0.6.4 · Aug 2026 · command-line history

example

  • Route checks through a SOCKS proxy maigret user --proxy socks5://127.0.0.1:1080
Reporting and investigation output 2 capabilities The cyber tool produces finished outputs from a completed or partial search, including mindmap files, archived URL snapshots, and AI-generated summaries. These outputs are intended for documentation and sharing findings.
Report generation shipped Generates reports in multiple formats, including XMind mindmaps, and appends archived snapshot links to each discovered profile URL. 3 releases · 4 other sources · first seen Jan 2021

release

  • Adds archive.org and archive.is links to profile URL blocks in reports. v0.6.2 · Jul 2026 · source · release history
  • Makes PDF report dependencies optional — install via pip install 'maigret[pdf]' to keep base installs lightweight. v0.6.1 · May 2026 · source · release history
  • added HTML and PDF report export 0.1.9 · Jan 2021 · source · release history

docs

  • - Generate a legacy XML XMind mindmap with a manifest for modern readers (one report per username). docs update · Aug 2026 · source
  • -X, --xmind - Generate a legacy XML XMind mindmap with a manifest for modern readers (one report per username). docs update · Aug 2026 · source

example

  • Install Maigret with optional PDF report support after upgrading from a base install. pip install 'maigret[pdf]' v0.6.1 · May 2026 · source
  • Search username and save HTML report maigret user --html
AI-generated investigation summaries shipped Produces an AI-generated summary of investigation findings using a configurable model and prompt. 1 release · 1 other source · first seen Aug 2026

release

  • Updates the AI report prompt and default model, improving the quality of AI-generated investigation summaries. v0.6.4 · Aug 2026 · source · release history

example

  • Run AI-assisted investigation summary maigret user --ai
Interface, reliability, and operational controls 3 capabilities The cyber tool offers both a command-line and browser-based interface, along with options to handle network failures and interrupted runs gracefully. These features keep searches usable in real operational conditions.
Web interface shipped Provides a browser-based interface with live scan progress, saved settings, scan history, and support for bypassing Cloudflare challenges. 7 releases · 6 other sources · first seen Apr 2026

Also counts toward: Web management console

release 7 total

  • Removes unconditional post-run write of the sites database to the package directory, so Maigret no longer exits with PermissionError on read-only installations (distro packages, snaps, Nix store, containers, CI); the only remaining write goes to ~/.maigret. v0.6.5 · Aug 2026 · source · release history
  • Updates the web interface with live scan progress, settings persistence across sessions, scan history, and improved navigation. v0.6.4 · Aug 2026 · source · release history
  • Updates web interface with live scan updates, settings persistence, and history view v0.6.4 · Aug 2026 · source · release history
  • Adds FlareSolverr integration to the web UI, enabling Cloudflare-bypass for sites that block automated requests. v0.6.2 · Jul 2026 · source · release history
  • Adds FlareSolverr integration in the web UI to bypass Cloudflare challenges. v0.6.2 · Jul 2026 · source · release history
  • Applies --proxy setting to CurlCffiChecker, enabling proxy use for TLS-fingerprint sites. v0.6.1 · May 2026 · source · release history

docs

  • .. _privacy: Privacy ======= Maigret runs entirely on your machine. It has no telemetry, no analytics and no update pings, and it sends nothing to the project maintainers. seen Sep 2026 · source
  • Tip Don’t want to install anything? Run Maigret in your browser via the Telegram bot — same engine, no setup. seen Sep 2026 · source
  • Privacy Maigret runs entirely on your machine. It has no telemetry, no analytics and no update pings, and it sends nothing to the project maintainers. seen Sep 2026 · source
  • socks5:// socks5h:// are interchangeable: Maigret rewrites the scheme to the spelling expected by the transport handling each site, so either one resolves hostnames at the proxy for the whole database. seen Aug 2026 · source
  • socks5:// and socks5h:// are interchangeable: Maigret rewrites the scheme to the spelling expected by the transport handling each site, so either one resolves hostnames at the proxy for the whole database. seen Aug 2026 · source

example

  • Launch built-in web interface maigret --web 5000
DNS resolver fallback shipped Offers a threaded DNS resolver as a fallback when the default resolver causes sites to be skipped due to network failures. 5 releases · 2 other sources · first seen Aug 2025

release

  • Adds --dns-resolver support inside --self-check and --submit so custom resolvers are respected during site validation. v0.6.6 · Sep 2026 · source · release history
  • Adds --dns-resolver threaded fallback option to recover from aiodns resolution failures. v0.6.2 · Jul 2026 · source · release history
  • Adds --dns-resolver threaded fallback option to recover from aiodns DNS resolution failures. v0.6.2 · Jul 2026 · source · release history
  • Adds 3 new crypto investigation sites: Polymarket, Zora, and Revolut.me. v0.6.1 · May 2026 · source · release history
  • Adds Cloudflare detection to identify sites blocking requests. v0.5.0 · Aug 2025 · source · release history

example

  • Switch to the threaded DNS resolver when aiodns failures are causing sites to be skipped on your network. maigret johndoe --dns-resolver threaded v0.6.2 · Jul 2026 · source
  • Fall back to a threaded DNS resolver when the default aiodns resolver fails in restrictive network environments. maigret <username> --dns-resolver threaded v0.6.2 · Jul 2026 · source
Graceful interruption and partial result preservation shipped Saves partial results and generates reports on the first interrupt signal, allowing a clean exit without losing progress. 1 release · first seen Jul 2026

release

  • Improves graceful Ctrl+C handling: first interrupt preserves partial results and generates reports; second interrupt exits cleanly with code 130. v0.6.2 · Jul 2026 · source · release history
Other 9 capabilities
Platform coverage expansion shipped Extends the tool's reach by adding support for new platform types, including specific social networks, ENS domains, and memory.lol archives. 10 releases · first seen Aug 2025

release 10 total

  • Adds a shared Mastodon engine using the accounts/lookup urlProbe for Mastodon instance coverage. v0.6.6 · Sep 2026 · source · release history
  • Introduces MediaWikiJson engines for detecting accounts on MediaWiki-based wikis v0.6.6 · Sep 2026 · source · release history
  • Introduces the Lemmy engine for detecting accounts on Lemmy instances v0.6.6 · Sep 2026 · source · release history
  • Adds a shared Mastodon engine using accounts/lookup urlProbe v0.6.6 · Sep 2026 · source · release history
  • Introduces Bilibili site checker support v0.6.4 · Aug 2026 · source · release history
  • Adds OnlyFans with an activation mechanism. v0.6.1 · May 2026 · source · release history
Automated site engine expansion shipped suggested Expands detection capabilities for specific platform types by adding dedicated engines (e.g., MediaWiki, DiscourseJson) and logic improvements to reduce false positives. 2 releases · first seen Sep 2026

Suggested capability: Attack surface inventory. This is our guess, not confirmed.

release

  • Adds a Vanilla engine, a MediaWiki engine, a MediaWikiJson engine, a DiscourseJson engine, and a Lemmy engine, expanding structured detection across forum and wiki platforms. v0.6.6 · Sep 2026 · source · release history
  • Adds status_code check creation to the --submit fallback: when a claimed profile returns 2xx and the unclaimed probe returns non-2xx, that signal is now preserved. v0.6.6 · Sep 2026 · source · release history
Site database auto-update documented Automatically checks for and applies updates to the site database at runtime, reporting the number of sites after a successful update or confirming the database is already current. 2 other sources

docs

  • [+] DB auto-update: database updated successfully ( sites) [*] DB auto-update: database is up to date ( sites) seen Sep 2026 · source
  • [+] DB auto-update: database updated successfully (<N> sites) [*] DB auto-update: database is up to date (<N> sites) seen Sep 2026 · source
Site configuration overrides shipped Allows specific sites to override default engine fields via configuration without losing the underlying engine logic. 1 release · first seen Sep 2026

release

  • Allows sites to override specific engine fields via configuration instead of losing them entirely v0.6.6 · Sep 2026 · source · release history
Activation token caching documented Stores and manages short-lived authentication tokens (e.g., guest tokens, JWTs) for sites that reject anonymous requests, keeping them out of the distributed site database. 1 other source · first seen Aug 2026

docs

  • # absolute path, system-wide policy set by an administrator /etc/maigret/settings.json .. _activation-token-cache: Activation token cache ---------------------- A handful of sites reject anonymous requests until a short-lived token is obtained: Twitter needs a guest token, Vimeo a JWT, Weibo and Wikimapia a session… docs update · Aug 2026 · source
Automated AI investigation mode shipped Provides an automated analysis workflow for OSINT results using a configurable AI model and prompt. 1 release · first seen May 2026

release

Cloudflare bypass via webgate shipped Uses a webgate mechanism to bypass Cloudflare protection on sites that were previously blocked, distinct from the standard FlareSolverr integration. 1 release · first seen May 2026

release

  • Adds Cloudflare bypass via a webgate mechanism for sites previously blocked. v0.6.1 · May 2026 · source · release history
Enhanced site database management shipped Improves the maintainability and classification of the internal site database through SOWEL tagging. 1 release · first seen Aug 2025

release

Username variant generation and search shipped Generates username variants based on a seed and searches for them across the site database. 1 release · first seen Aug 2025

release

  • Adds username permutator feature to generate and search username variants automatically. v0.5.0 · Aug 2025 · source · release history

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface
  6. Community health
  7. Contributor trend distinct committers, this year against last
  8. Maintainer concentration bus factor now against a year ago
  9. Issue backlog trend issues closed per issue opened, 12 months
  10. Responsiveness median time to a maintainer’s first reply

Nine scores for Maigret, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail Maigret puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Releases

Show

25 entries

  1. September 20263
  2. August 20266
  3. July 20268
  4. May 20261
  5. April 20261
  6. August 20251
  7. September 20221
  8. January 20222
  9. February 20211
  10. January 20211
    Show

    25 entries

    Project health

    Issue, contributor and maintainer activity in soxoj/maigret, 2023-10 – 2026-09, as of 2026-09-25. Twelve-month figures first; the trend lines run the whole window.

    1. Contributors 44 +32 vs prior 12 months
    2. Maintainers 2 +1 joined · −0 left, last 12 months
    3. Bus factor 1 committers behind half the commits
    4. Community-filed 21% of issues opened, last 12 months
    5. Median time to close 4.6 days first maintainer reply 2.1 days
    6. Open backlog 17 of 1,610 issues ever filed
    1. Issues opened / month 2 · 8 communitymaintainers
    2. Open backlog 17
    3. Contributors / month 6
    4. Commits / month 54
    5. Stars 37,760
    Issue themes, last 12 months
    • bugs 5%
    • features 3%
    • questions 0%
    • other 92%

    Counts from the project's public repository and git history; no individuals are identified. Maintainers are the committers covering 80% of the last year's commits. how we measure this

    Libraries its release ships

    What its latest release locks, checked against known advisories.

    None of its release's images build from a lockfile we can read.

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →