truffleHog

v2.2.1

Searches through git repositories for high entropy strings, digging deep into commit history. For more information about how to use this package see README

Latest version published 3 years ago
License: AGPL-3.0

Ensure you're using the healthiest python packages

Snyk scans all the packages in your projects for vulnerabilities and provides automated fix advice

Package Health Score

63 / 100

Explore Similar Packages

Popularity

Popular
GitHub Stars
13.69K
Forks
1.49K
Contributors
100

Direct Usage Popularity

TOP 10%

Based on project statistics from the GitHub repository for the PyPI package truffleHog, we found that it has been starred 13,693 times.

Security

Security review needed
Powered by Snyk
2.2.1 (Latest)

Security and license risk for latest version

Release Date
Feb 5, 2021
Direct Vulnerabilities
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
Indirect Vulnerabilities
  • 1
    C
  • 3
    H
  • 2
    M
  • 0
    L
License Risk
  • 2
    H
  • 0
    M
  • 0
    L
All security vulnerabilities belong to production dependencies of direct and indirect packages.

License
AGPL-3.0
Alert

Non-Permissive License

We noticed that this project uses a license which requires less permissive conditions such as disclosing the source code, stating changes or redistributing the source under the same license. It is advised to further consult the license terms before use.


Security Policy
Yes

A security vulnerability was detected in an indirect dependency that is added to your project when the latest version of truffleHog is installed.

We highly advise you to review these security issues.

You can connect your project's repository to Snyk to stay up to date on security alerts and receive automatic fix pull requests.

Fix it in your project with Snyk!

Maintenance

Inactive

Commit Frequency

Open Issues
117
Open PR
68
Last Release
3 years ago
Last Commit
6 days ago

Further analysis of the maintenance status of truffleHog based on released PyPI versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for truffleHog is that it hasn't seen any new versions released to PyPI in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Community

Active
Readme
Yes
Contributing.md
Yes
Code of Conduct
Yes
Contributors
100
Funding
No

With more than 10 contributors for the truffleHog repository, this is possibly a sign for a growing and inviting community.


Embed Package Health Score Badge

package health: 63/100 package health 63/100

Package

Python Versions Compatibility
Unspecified

Age
7 years
Latest Release
3 years ago
Dependencies
N/A
Versions
42
Maintainers
1
Wheels
OS Independent