KeygraphHQ/shannon
Shannon is an AI pentester for web applications and APIs. It analyzes your source code, identifies attack vectors, and executes real exploits to prove vulnerabilities before they reach production.
48.9k stars · 5.6k forks · TypeScript
Healthy
Healthy: actively maintained by 3 people, no known risks.
Why
No rule fired.
What would change this
- A dormant maintenance status, a deprecated or archived package, a successor link, or a critical advisory would change this.
Maintenance
CompleteActive
- Human commits, 30 days
- 18
- Human commits, 90 days
- 51
- Human commits, 365 days
- 298
- Bot share of commits, 365 days
- 0%
- Last commit
- Oct 8, 2026 (7 days ago)
- Last human commit
- Oct 8, 2026 (7 days ago)
- Authors, 90 days
- 3
- Last release
- Oct 6, 2026 (9 days ago)
- Median PR merge time
- under an hour
Responsiveness: of 28 recent issues, 96% got a maintainer reply. Median first response: 13 days.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 298 since Oct 14, 2025
- Authors for half of commits
- 2
- Authors for 80% of commits
- 3
- Contributors
- 7
Top committers
- ajmallesh: 41% of commits
- ezl-keygraph: 34% of commits
- george-keygraph: 12% of commits
- keygraphVarun: 8% of commits
- Khaushik-keygraph: 3% of commits
The top committer changed during this period.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- Nov 14, 2025 to Nov 20, 2025: about 71 more stars than usual, peak 22 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Nov 27, 2025 to Nov 30, 2025: about 67 more stars than usual, peak 27 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Dec 14, 2025 to Dec 28, 2025: about 2.6k more stars than usual, peak 750 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Feb 5, 2026 to Mar 11, 2026: about 27.5k more stars than usual, peak 3.6k in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Apr 5, 2026 to Apr 9, 2026: about 2.1k more stars than usual, peak 873 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Apr 21, 2026 to Apr 27, 2026: about 1.2k more stars than usual, peak 638 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- May 15, 2026 to May 20, 2026: about 949 more stars than usual, peak 446 in one day, a shape we can't classify. Outside explanation: a jump in issues and pull requests.
- Aug 23, 2026 to Aug 24, 2026: about 100 more stars than usual, peak 111 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
- Aug 31, 2026 to Sep 3, 2026: about 268 more stars than usual, peak 126 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
- 5 stars GitHub has since removed (tracked since Oct 13, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
Sources: How star history is analyzed
Risk
CompleteFlags
- Info: The license file changed from BUSL-1.1 to AGPL-3.0 within the last year (GitHub commit history). Details
License
- Now
- AGPL-3.0 (OSI-approved)
- A year ago
- BUSL-1.1 (not OSI-approved)
The license changed in the last year.
Packages
No published packages found.
Sources: GitHub: KeygraphHQ/shannon
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/KeygraphHQ/shannon)Earlier verdicts
- Oct 14, 2026: Healthy
- Oct 13, 2026: Healthy
- Oct 13, 2026: Healthy