gohugoio/hugo

The world’s fastest framework for building websites.

90.1k stars · 8.4k forks · Go

Caution

Caution: one person wrote most of the recent commits.

Why

One person wrote 77% of human commits in the last year, so the project depends on them continuing. (source 1, source 2)

What would change this

A second person takes a substantial share of commits.
Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.)

Maintenance

Partial

Active

Human commits, 30 days: 64
Human commits, 90 days: 136
Human commits, 365 days: 650
Bot share of commits, 365 days: 20%
Last commit: Oct 14, 2026 (23 hours ago)
Last human commit: Oct 14, 2026 (23 hours ago)
Authors, 90 days: 12
Last release: Oct 13, 2026 (1 day ago)
Median PR merge time: 12 hours

Responsiveness: of 22 recent issues, 91% got a maintainer reply. Median first response: 3 hours.

Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.

Sources: Commits, Releases, Merged pull requests, Issues

People

Complete

Owner: Organization
Commits sampled: 398 since Oct 14, 2025
Authors for half of commits: 1
Authors for 80% of commits: 2
Contributors: 415

Top committers

bep: 77% of commits
jmooring: 15% of commits
xndvaz: 2% of commits
Soundcreates: 1% of commits
Shiwang0-0: 1% of commits

Shares come from the newest sampled commits, since the commit sample is capped.

Sources: Commits, Contributors

Stars

Complete

Organic, confidence high

Bars show stars gained each week. Orange bars overlap a burst.

Bursts

Nov 13, 2013 to Nov 13, 2013: about 14 more stars than usual, peak 14 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
Nov 18, 2013 to Nov 19, 2013: about 40 more stars than usual, peak 29 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Jan 15, 2014 to Jan 16, 2014: about 36 more stars than usual, peak 29 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Aug 19, 2014 to Aug 21, 2014: about 51 more stars than usual, peak 34 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Aug 3, 2015 to Aug 4, 2015: about 64 more stars than usual, peak 61 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Nov 25, 2015 to Dec 1, 2015: about 373 more stars than usual, peak 161 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
Oct 9, 2016 to Oct 14, 2016: about 546 more stars than usual, peak 212 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
Jul 8, 2019 to Jul 10, 2019: about 93 more stars than usual, peak 68 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Apr 5, 2020 to Apr 5, 2020: about 56 more stars than usual, peak 80 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Nov 3, 2020 to Nov 3, 2020: about 219 more stars than usual, peak 241 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Jun 19, 2021 to Jun 20, 2021: about 196 more stars than usual, peak 190 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Aug 12, 2022 to Aug 18, 2022: about 286 more stars than usual, peak 111 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Sep 18, 2022 to Sep 21, 2022: about 431 more stars than usual, peak 174 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Jan 10, 2025 to Jan 10, 2025: about 56 more stars than usual, peak 79 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Apr 21, 2025 to Apr 28, 2025: about 337 more stars than usual, peak 92 in one day, a shape we can't classify. Outside explanation: a jump in issues and pull requests.

6 stars GitHub has since removed (tracked since Oct 13, 2026).

Anyone can buy stars for any repo; bursts alone don't prove the owner did.

The star history looks organic.

Sources: How star history is analyzed

Risk

Complete

Flags

No risk flags.

License

Now: Apache-2.0 (OSI-approved)
A year ago: Apache-2.0 (OSI-approved)

Packages

github.com/gohugoio/hugo (GO): latest v0.168.0, published Oct 13, 2026
Advisories for the latest version: none listed

Package and advisory data: deps.dev and OSV.

OpenSSF Scorecard: 5.6 out of 10 (via deps.dev).

Sources: GitHub: gohugoio/hugo, deps.dev: Go github.com/gohugoio/hugo

Badge

Add this to a README to show the current verdict:

[![RepoRadar](https://reporadar.ai/gohugoio/hugo/badge.svg)](https://reporadar.ai/gohugoio/hugo)

Earlier verdicts

Oct 14, 2026: Caution
Oct 13, 2026: Caution
Oct 13, 2026: Caution

Computed 19 hours ago · method 2026.10.2