aquasecurity/trivy

Maintenance

Active

Human commits, 30 days

48

Human commits, 90 days

111

Human commits, 365 days

407

Bot share of commits, 365 days

21%

Last commit

Oct 14, 2026 (19 hours ago)

Last human commit

Oct 14, 2026 (20 hours ago)

Authors, 90 days

29

Last release

Oct 14, 2026 (19 hours ago)

Median PR merge time

3 days

Responsiveness: of 11 recent issues, 0% got a maintainer reply. Median first response: n/a.

• Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.

Sources: Commits, Releases, Merged pull requests, Issues

People

Owner

Organization

Commits sampled

394 since Oct 14, 2025

Authors for half of commits

2

Authors for 80% of commits

21

Contributors

440

Top committers

• nikpivkin: 28% of commits
• DmitriyLewen: 24% of commits
• knqyf263: 15% of commits
• yagreut: 2% of commits
• Owen Rumney: 2% of commits

• Shares come from the newest sampled commits, since the commit sample is capped.

Sources: Commits, Contributors

Stars

Mostly organic, confidence high

Bursts

• May 16, 2019 to Jun 5, 2019: about 1.1k more stars than usual, peak 238 in one day, a spike that tapers off. We couldn't check for an outside explanation.
• Aug 19, 2019 to Aug 22, 2019: about 193 more stars than usual, peak 89 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• Aug 28, 2019 to Aug 28, 2019: about 26 more stars than usual, peak 31 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• Oct 28, 2020 to Oct 30, 2020: about 54 more stars than usual, peak 36 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• Feb 9, 2021 to Feb 10, 2021: about 177 more stars than usual, peak 157 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• Jul 14, 2021 to Jul 15, 2021: about 94 more stars than usual, peak 80 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• Nov 10, 2021 to Nov 12, 2021: about 123 more stars than usual, peak 66 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in issues and pull requests.
• Feb 18, 2022 to Feb 18, 2022: about 117 more stars than usual, peak 132 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• May 21, 2022 to May 22, 2022: about 109 more stars than usual, peak 100 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• Jun 9, 2022 to Jun 10, 2022: about 126 more stars than usual, peak 120 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• Aug 16, 2022 to Aug 19, 2022: about 220 more stars than usual, peak 148 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• Feb 11, 2023 to Feb 11, 2023: about 59 more stars than usual, peak 73 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• Apr 25, 2025 to Apr 27, 2025: about 238 more stars than usual, peak 125 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
• May 13, 2025 to May 14, 2025: about 176 more stars than usual, peak 157 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
• Sep 3, 2025 to Sep 11, 2025: about 629 more stars than usual, peak 146 in one day, a shape we can't classify. No outside explanation found, so this burst is unexplained.
• Oct 1, 2025 to Oct 3, 2025: about 117 more stars than usual, peak 93 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• Dec 6, 2025 to Dec 10, 2025: about 233 more stars than usual, peak 130 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• Feb 5, 2026 to Feb 9, 2026: about 461 more stars than usual, peak 157 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• Feb 20, 2026 to Feb 21, 2026: about 106 more stars than usual, peak 105 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
• Mar 1, 2026 to Mar 6, 2026: about 1.1k more stars than usual, peak 343 in one day, a shape we can't classify. Outside explanation: a jump in forks, a jump in issues and pull requests.
• Mar 21, 2026 to Mar 26, 2026: about 811 more stars than usual, peak 285 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
• Jun 3, 2026 to Jun 12, 2026: about 945 more stars than usual, peak 227 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.

Anyone can buy stars for any repo; bursts alone don't prove the owner did.

• Some star bursts have no matching forks, issues, releases, or launch coverage.
• Anyone can buy stars for any repo, so this describes the star history only.

Sources: How star history is analyzed

Risk

Flags

• Warning: OSV, via deps.dev, lists GO-2026-4919 at MODERATE, LOW or unrated severity on the latest version of github.com/aquasecurity/trivy. Details

License

Now

Apache-2.0 (OSI-approved)

A year ago

Apache-2.0 (OSI-approved)

Packages

• github.com/aquasecurity/trivy (GO): latest v0.76.0, published Oct 14, 2026
  Advisories for the latest version: GO-2026-4919 (unknown)

Package and advisory data: deps.dev and OSV.

Sources: GitHub: aquasecurity/trivy, deps.dev: Go github.com/aquasecurity/trivy, OSV: GO-2026-4919