truffleHog

v2.2.1

Searches through git repositories for high entropy strings, digging deep into commit history. For more information about how to use this package see README

Latest version published 2 years ago
License: AGPL-3.0

Ensure you're using the healthiest python packages

Snyk scans all the packages in your projects for vulnerabilities and provides automated fix advice

Package Health Score

63 / 100

Explore Similar Packages

Popularity

Popular

Total Weekly Downloads (17,485)

Popularity by version
GitHub Stars
10.29K
Forks
1.24K
Contributors
50

Direct Usage Popularity

TOP 30%

The PyPI package truffleHog receives a total of 17,485 downloads a week. As such, we scored truffleHog popularity level to be Popular.

Based on project statistics from the GitHub repository for the PyPI package truffleHog, we found that it has been starred 10,295 times.

The download numbers shown are the average weekly downloads from the last 6 weeks.

Security

Security review needed
Powered by Snyk
2.2.1 (Latest)

Security and license risk for latest version

Release Date
Feb 5, 2021
Direct Vulnerabilities
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
Indirect Vulnerabilities
  • 0
    C
  • 1
    H
  • 1
    M
  • 0
    L
License Risk
  • 2
    H
  • 0
    M
  • 0
    L
All security vulnerabilities belong to production dependencies of direct and indirect packages.

License
AGPL-3.0
Alert

Non-Permissive License

We noticed that this project uses a license which requires less permissive conditions such as disclosing the source code, stating changes or redistributing the source under the same license. It is advised to further consult the license terms before use.


Security Policy
Yes

A security vulnerability was detected in an indirect dependency that is added to your project when the latest version of truffleHog is installed.

We highly advise you to review these security issues.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Fix it in your project with Snyk!

Maintenance

Inactive

Commit Frequency

Open Issues
70
Open PR
37
Last Release
2 years ago
Last Commit
3 days ago

Further analysis of the maintenance status of truffleHog based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for truffleHog is that it hasn't seen any new versions released to PyPI in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Active
Readme
Yes
Contributing.md
Yes
Code of Conduct
Yes
Contributors
50
Funding
No

With more than 10 contributors for the truffleHog repository, this is possibly a sign for a growing and inviting community.


Embed Package Health Score Badge

package health: 63/100 package health 63/100

Package

Python Versions Compatibility
Unspecified

Age
6 years
Latest Release
2 years ago
Dependencies
N/A
Versions
42
Maintainers
1
Wheels
OS Independent