0xJacky/nginx-ui
Yet another WebUI for Nginx
11.6k stars · 901 forks · Go
Caution
Caution: the published package has not been released in two years.
Why
- The Go package github.com/0xJacky/Nginx-UI has had no release since May 2023, while the repository has 1,116 human commits in the last year; the old release has 31 known security advisories (GHSA-78mf-482w-62qj, GHSA-7jrr-xw9c-mj39, GHSA-8r25-68wm-jw35), which do not show whether the current code is affected. (source 1, source 2, source 3, source 4, source 5, source 6, source 7, source 8, source 9, source 10, source 11, source 12, source 13, source 14, source 15, source 16, source 17, source 18, source 19, source 20, source 21, source 22, source 23, source 24, source 25, source 26, source 27, source 28, source 29, source 30, source 31, source 32, source 33)
What would change this
- A new package release is published.
- Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.; Authors in the last 90 days are counted from the sampled commits only.)
Maintenance
PartialActive
- Human commits, 30 days
- 361
- Human commits, 90 days
- 831
- Human commits, 365 days
- 1.1k
- Bot share of commits, 365 days
- 3%
- Last commit
- Oct 14, 2026 (20 hours ago)
- Last human commit
- Oct 14, 2026 (20 hours ago)
- Authors, 90 days
- 14
- Last release
- Oct 7, 2026 (7 days ago)
- Median PR merge time
- under an hour
Responsiveness: of 27 recent issues, 81% got a maintainer reply. Median first response: 33 hours.
- Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
- Authors in the last 90 days are counted from the sampled commits only.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Personal account
- Commits sampled
- 485 since Oct 14, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 2
- Contributors
- 57
Top committers
- 0xJacky: 58% of commits
- EFX1SZH: 27% of commits
- be-student: 5% of commits
- Hintay: 4% of commits
- akinoccc: 2% of commits
- Shares come from the newest sampled commits, since the commit sample is capped.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- Apr 23, 2023 to Apr 27, 2023: about 101 more stars than usual, peak 60 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
- Jun 24, 2023 to Jun 26, 2023: about 72 more stars than usual, peak 49 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Sep 2, 2023 to Sep 3, 2023: about 48 more stars than usual, peak 27 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
- Oct 12, 2023 to Oct 13, 2023: about 22 more stars than usual, peak 15 in one day, a spike that tapers off. We couldn't check for an outside explanation.
- Sep 26, 2024 to Oct 27, 2024: about 2.1k more stars than usual, peak 219 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Oct 28, 2024 to Oct 29, 2024: about 133 more stars than usual, peak 119 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Nov 3, 2024 to Nov 8, 2024: about 209 more stars than usual, peak 86 in one day, a shape we can't classify. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jan 8, 2025 to Jan 9, 2025: about 64 more stars than usual, peak 48 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jan 29, 2025 to Jan 31, 2025: about 457 more stars than usual, peak 302 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Jul 19, 2025 to Jul 21, 2025: about 78 more stars than usual, peak 64 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Aug 26, 2025 to Aug 28, 2025: about 61 more stars than usual, peak 36 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
Sources: How star history is analyzed
Risk
CompleteFlags
- Warning: The latest release of the Go package github.com/0xJacky/Nginx-UI was published more than 24 months ago, while the repository has had 1,116 human commits in the last year (deps.dev); the old release has 31 known security advisories (GHSA-78mf-482w-62qj, GHSA-7jrr-xw9c-mj39, GHSA-8r25-68wm-jw35), which do not show whether the current code is affected. Details
License
- Now
- AGPL-3.0 (OSI-approved)
- A year ago
- AGPL-3.0 (OSI-approved)
Packages
- github.com/0xJacky/Nginx-UI (GO): latest v1.9.9, published May 5, 2023
Advisories for the latest version: GHSA-78mf-482w-62qj (high), GHSA-7jrr-xw9c-mj39 (moderate), GHSA-8r25-68wm-jw35 (high), GHSA-cp8r-8jvw-v3qg (moderate), GHSA-fhh2-gg7w-gwpq (critical), GHSA-g9w5-qffc-6762 (critical), GHSA-h374-mm57-879c (high), GHSA-h6c2-x2m2-mwhf (critical), GHSA-m468-xcm6-fxg4 (high), GHSA-m8p8-53vf-8357 (moderate), GHSA-pxmr-q2x3-9x9m (unknown), GHSA-qcjq-7f7v-pvc8 (unknown), GHSA-wr32-99hh-6f35 (unknown), GHSA-x234-x5vq-cc2v (unknown), GHSA-xvq9-4vpv-227m (unknown), GO-2024-2462 (unknown), GO-2024-2463 (unknown), GO-2024-2464 (unknown), GO-2024-2480 (unknown), GO-2024-2481 (unknown), GO-2026-4614 (unknown), GO-2026-4902 (unknown), GO-2026-4903 (unknown), GO-2026-4904 (unknown), GO-2026-4906 (unknown), GO-2026-4907 (unknown), GO-2026-5210 (unknown), GO-2026-5227 (unknown), GO-2026-5412 (unknown), GO-2026-5719 (unknown), GO-2026-5733 (unknown)
Package and advisory data: deps.dev and OSV.
Sources: GitHub: 0xJacky/nginx-ui, deps.dev: Go github.com/0xJacky/Nginx-UI, OSV: GHSA-78mf-482w-62qj, OSV: GHSA-7jrr-xw9c-mj39, OSV: GHSA-8r25-68wm-jw35, OSV: GHSA-cp8r-8jvw-v3qg, OSV: GHSA-fhh2-gg7w-gwpq, OSV: GHSA-g9w5-qffc-6762, OSV: GHSA-h374-mm57-879c, OSV: GHSA-h6c2-x2m2-mwhf, OSV: GHSA-m468-xcm6-fxg4, OSV: GHSA-m8p8-53vf-8357, OSV: GHSA-pxmr-q2x3-9x9m, OSV: GHSA-qcjq-7f7v-pvc8, OSV: GHSA-wr32-99hh-6f35, OSV: GHSA-x234-x5vq-cc2v, OSV: GHSA-xvq9-4vpv-227m, OSV: GO-2024-2462, OSV: GO-2024-2463, OSV: GO-2024-2464, OSV: GO-2024-2480, OSV: GO-2024-2481, OSV: GO-2026-4614, OSV: GO-2026-4902, OSV: GO-2026-4903, OSV: GO-2026-4904, OSV: GO-2026-4906, OSV: GO-2026-4907, OSV: GO-2026-5210, OSV: GO-2026-5227, OSV: GO-2026-5412, OSV: GO-2026-5719, OSV: GO-2026-5733
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/0xJacky/nginx-ui)Earlier verdicts
- Oct 14, 2026: Caution
- Oct 14, 2026: Caution