danielmiessler/SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

74.2k stars · 25.1k forks · PHP

Caution

Caution: one person wrote most of the recent commits.

Why

One person wrote 71% of human commits in the last year, so the project depends on them continuing. (source 1, source 2)

What would change this

A second person takes a substantial share of commits.
Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.; Most commits in the last year come from bots.; Only 2 recent issues can be checked for a response, too few to measure response time.)

Maintenance

Partial

Slowing

Human commits, 30 days: 4
Human commits, 90 days: 17
Human commits, 365 days: 180
Bot share of commits, 365 days: 86%
Last commit: Oct 14, 2026 (19 hours ago)
Last human commit: Sep 25, 2026 (20 days ago)
Authors, 90 days: 8
Last release: Mar 23, 2026 (6 months ago)
Median PR merge time: 3 days

Responsiveness: of 2 recent issues, n/a got a maintainer reply. Median first response: n/a.

Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
Most commits in the last year come from bots.
Only 2 recent issues can be checked for a response, too few to measure response time.

Sources: Commits, Releases, Merged pull requests, Issues

People

Complete

Owner: Personal account
Commits sampled: 69 since Oct 14, 2025
Authors for half of commits: 1
Authors for 80% of commits: 5
Contributors: 317

Top committers

ItsIgnacioPortal: 71% of commits
goosvorbook: 4% of commits
lurescope: 3% of commits
0xBassia: 1% of commits
binary1985: 1% of commits

Shares come from the newest sampled commits, since the commit sample is capped.

Sources: Commits, Contributors

Stars

Complete

Mostly organic, confidence high

Bars show stars gained each week. Orange bars overlap a burst.

Bursts

Sep 18, 2013 to Sep 18, 2013: about 19 more stars than usual, peak 19 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Jan 31, 2014 to Feb 2, 2014: about 38 more stars than usual, peak 15 in one day, a flat block of stars. Outside explanation: a jump in forks.
May 5, 2015 to May 5, 2015: about 20 more stars than usual, peak 21 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Jun 20, 2016 to Jun 23, 2016: about 229 more stars than usual, peak 115 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Dec 21, 2017 to Jan 5, 2018: about 2.4k more stars than usual, peak 777 in one day, a shape we can't classify. No outside explanation found, so this burst is unexplained.
Aug 19, 2019 to Aug 20, 2019: about 60 more stars than usual, peak 49 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Oct 18, 2019 to Oct 21, 2019: about 181 more stars than usual, peak 92 in one day, a shape we can't classify. Outside explanation: a jump in issues and pull requests.
Oct 18, 2020 to Oct 20, 2020: about 172 more stars than usual, peak 76 in one day, a flat block of stars. No outside explanation found, so this burst is unexplained.
Dec 2, 2020 to Dec 4, 2020: about 186 more stars than usual, peak 93 in one day, a flat block of stars. No outside explanation found, so this burst is unexplained.
Aug 30, 2021 to Aug 31, 2021: about 97 more stars than usual, peak 76 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Dec 3, 2021 to Dec 10, 2021: about 490 more stars than usual, peak 149 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Apr 7, 2022 to Apr 8, 2022: about 64 more stars than usual, peak 62 in one day, a spike that tapers off. We couldn't check for an outside explanation.
Jul 27, 2022 to Jul 29, 2022: about 109 more stars than usual, peak 64 in one day, a flat block of stars. No outside explanation found, so this burst is unexplained.
Aug 16, 2022 to Aug 19, 2022: about 236 more stars than usual, peak 143 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
Jul 17, 2023 to Jul 20, 2023: about 179 more stars than usual, peak 89 in one day, a spike that tapers off. We couldn't check for an outside explanation.
Jan 29, 2024 to Jan 30, 2024: about 68 more stars than usual, peak 72 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
Jul 6, 2024 to Jul 10, 2024: about 214 more stars than usual, peak 98 in one day, a shape we can't classify. Outside explanation: a jump in issues and pull requests.
Oct 14, 2024 to Oct 18, 2024: about 408 more stars than usual, peak 147 in one day, a shape we can't classify. Outside explanation: a jump in issues and pull requests.
Nov 21, 2024 to Nov 21, 2024: about 76 more stars than usual, peak 98 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Dec 27, 2024 to Dec 28, 2024: about 92 more stars than usual, peak 83 in one day, a spike that tapers off. We couldn't check for an outside explanation.
Apr 4, 2026 to Apr 5, 2026: about 108 more stars than usual, peak 100 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Oct 9, 2026 to Oct 9, 2026: about 55 more stars than usual, peak 79 in one day, a spike that tapers off. We couldn't check for an outside explanation.

6 stars GitHub has since removed (tracked since Oct 13, 2026).

Anyone can buy stars for any repo; bursts alone don't prove the owner did.

Some star bursts have no matching forks, issues, releases, or launch coverage.
Anyone can buy stars for any repo, so this describes the star history only.

Sources: How star history is analyzed

Risk

Complete

Flags

No risk flags.

License

Now: MIT (OSI-approved)
A year ago: MIT (OSI-approved)

Packages

No published packages found.

OpenSSF Scorecard: 4.2 out of 10 (via deps.dev).

Sources: GitHub: danielmiessler/SecLists

Badge

Add this to a README to show the current verdict:

[![RepoRadar](https://reporadar.ai/danielmiessler/SecLists/badge.svg)](https://reporadar.ai/danielmiessler/SecLists)

Earlier verdicts

Oct 14, 2026: Caution
Oct 13, 2026: Caution
Oct 13, 2026: Caution

Computed 18 hours ago · method 2026.10.2