minimaxir/big-list-of-naughty-strings

The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.

47.7k stars · 2.1k forks · Python

At risk

At risk: no human commits in a year.

Why

No human commits since April 2021. (source 1, source 2, source 3, source 4)

What would change this

A release or merged commit from a maintainer.

Maintenance

Complete

Dormant

Human commits, 30 days: 0
Human commits, 90 days: 0
Human commits, 365 days: 0
Bot share of commits, 365 days: 0%
Last commit: Apr 17, 2021 (5 years ago)
Last human commit: Apr 17, 2021 (5 years ago)
Authors, 90 days: 0
Last release: none found
Median PR merge time: 44 hours

Responsiveness: of 0 recent issues, n/a got a maintainer reply. Median first response: n/a.

Only 0 recent issues can be checked for a response, too few to measure response time.
39 pull requests are open and nobody has committed in a year.

Sources: Commits, Releases, Merged pull requests, Issues

People

Complete

Owner: Personal account
Commits sampled: 100 since Jan 16, 2017
Authors for half of commits: 2
Authors for 80% of commits: 15
Contributors: 66

Top committers

minimaxir: 46% of commits
l0b0: 9% of commits
TheJambo: 4% of commits
zackw: 4% of commits
AnthonySteele: 2% of commits

No human commits in the last 365 days, so shares use the newest 100 commits back to 2017-01-16T09:38:15Z.

Sources: Commits, Contributors

Stars

Complete

Organic, confidence high

Bars show stars gained each week. Orange bars overlap a burst.

Bursts

Nov 20, 2015 to Nov 23, 2015: about 90 more stars than usual, peak 40 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
Jan 1, 2016 to Jan 7, 2016: about 102 more stars than usual, peak 28 in one day, a flat block of stars. Outside explanation: a jump in forks.
Feb 9, 2016 to Feb 18, 2016: about 1.2k more stars than usual, peak 516 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Oct 18, 2016 to Oct 21, 2016: about 90 more stars than usual, peak 36 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
Jan 15, 2017 to Feb 7, 2017: about 7k more stars than usual, peak 2.8k in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
May 4, 2017 to May 8, 2017: about 321 more stars than usual, peak 172 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Aug 17, 2017 to Aug 18, 2017: about 61 more stars than usual, peak 43 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Sep 5, 2017 to Sep 8, 2017: about 212 more stars than usual, peak 146 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
Dec 21, 2017 to Dec 23, 2017: about 89 more stars than usual, peak 71 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Feb 21, 2018 to Mar 6, 2018: about 485 more stars than usual, peak 82 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Nov 5, 2018 to Nov 9, 2018: about 236 more stars than usual, peak 111 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Nov 15, 2018 to Dec 4, 2018: about 5.6k more stars than usual, peak 2.8k in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
Jan 16, 2019 to Jan 21, 2019: about 175 more stars than usual, peak 78 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Jan 30, 2019 to Feb 1, 2019: about 382 more stars than usual, peak 187 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Jul 7, 2019 to Jul 9, 2019: about 72 more stars than usual, peak 38 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Sep 19, 2019 to Sep 19, 2019: about 57 more stars than usual, peak 60 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Nov 28, 2019 to Dec 5, 2019: about 290 more stars than usual, peak 67 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Jan 8, 2020 to Jan 17, 2020: about 287 more stars than usual, peak 112 in one day, a shape we can't classify. Outside explanation: a jump in forks.
Mar 12, 2020 to Mar 17, 2020: about 308 more stars than usual, peak 138 in one day, a spike that tapers off. Outside explanation: a jump in forks.
May 12, 2020 to May 14, 2020: about 175 more stars than usual, peak 141 in one day, a spike that tapers off. Outside explanation: a jump in forks.
May 24, 2020 to May 29, 2020: about 1.2k more stars than usual, peak 714 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
Nov 13, 2020 to Nov 18, 2020: about 194 more stars than usual, peak 50 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Jan 14, 2021 to Jan 16, 2021: about 177 more stars than usual, peak 154 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Feb 19, 2021 to Feb 22, 2021: about 346 more stars than usual, peak 143 in one day, a shape we can't classify. Outside explanation: a jump in forks.
May 13, 2021 to May 17, 2021: about 156 more stars than usual, peak 52 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Oct 20, 2021 to Oct 22, 2021: about 124 more stars than usual, peak 106 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Jan 20, 2022 to Jan 22, 2022: about 101 more stars than usual, peak 57 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Sep 10, 2022 to Sep 18, 2022: about 778 more stars than usual, peak 234 in one day, a shape we can't classify. Outside explanation: a jump in forks.
Oct 6, 2022 to Oct 7, 2022: about 92 more stars than usual, peak 87 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Jan 26, 2023 to Jan 31, 2023: about 82 more stars than usual, peak 36 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Nov 11, 2023 to Nov 16, 2023: about 74 more stars than usual, peak 23 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Dec 27, 2024 to Jan 4, 2025: about 388 more stars than usual, peak 160 in one day, a spike that tapers off. Outside explanation: a jump in forks.
Jul 15, 2025 to Jul 17, 2025: about 54 more stars than usual, peak 32 in one day, a spike that tapers off. We couldn't check for an outside explanation.

1 stars GitHub has since removed (tracked since Oct 13, 2026).

Anyone can buy stars for any repo; bursts alone don't prove the owner did.

The star history looks organic.

Sources: How star history is analyzed

Risk

Complete

Flags

Info: The OpenSSF Scorecard for this project is 3.2 out of 10 (deps.dev). Details

License

Now: MIT (OSI-approved)
A year ago: MIT (OSI-approved)

Packages

big-list-of-naughty-strings (NPM): latest 1.0.0, published Sep 18, 2015
Advisories for the latest version: none listed

Package and advisory data: deps.dev and OSV.

OpenSSF Scorecard: 3.2 out of 10 (via deps.dev).

Sources: GitHub: minimaxir/big-list-of-naughty-strings, deps.dev: npm big-list-of-naughty-strings

Badge

Add this to a README to show the current verdict:

[![RepoRadar](https://reporadar.ai/minimaxir/big-list-of-naughty-strings/badge.svg)](https://reporadar.ai/minimaxir/big-list-of-naughty-strings)

Earlier verdicts

Oct 14, 2026: At risk
Oct 13, 2026: At risk
Oct 13, 2026: At risk

Computed 16 hours ago · method 2026.10.2