rapid7/metasploit-framework
Metasploit Framework
39.1k stars · 15k forks · Ruby
Healthy
Healthy: actively maintained by 43 people, no known risks.
Why
No rule fired.
What would change this
- Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.; Authors in the last 90 days are counted from the sampled commits only.)
- A dormant maintenance status, a deprecated or archived package, a successor link, or a critical advisory would change this.
Maintenance
PartialActive
- Human commits, 30 days
- 195
- Human commits, 90 days
- 1.1k
- Human commits, 365 days
- 4.5k
- Bot share of commits, 365 days
- 0%
- Last commit
- Oct 14, 2026 (18 hours ago)
- Last human commit
- Oct 14, 2026 (18 hours ago)
- Authors, 90 days
- 43
- Last release
- none found
- Median PR merge time
- 5 days
Responsiveness: of 14 recent issues, 14% got a maintainer reply. Median first response: 15 days.
- Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
- Authors in the last 90 days are counted from the sampled commits only.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 500 since Oct 14, 2025
- Authors for half of commits
- 7
- Authors for 80% of commits
- 16
- Contributors
- 289
Top committers
- jenkins-metasploit: 12% of commits
- jheysel-r7: 9% of commits
- rmhowe425: 7% of commits
- bwatters-r7: 6% of commits
- sfewer-r7: 6% of commits
- Shares come from the newest sampled commits, since the commit sample is capped.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- May 14, 2017 to May 18, 2017: about 117 more stars than usual, peak 45 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Feb 6, 2018 to Feb 7, 2018: about 55 more stars than usual, peak 39 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jan 11, 2019 to Jan 16, 2019: about 160 more stars than usual, peak 55 in one day, a shape we can't classify. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Sep 6, 2019 to Sep 12, 2019: about 545 more stars than usual, peak 163 in one day, a shape we can't classify. No outside explanation found, so this burst is unexplained.
- Dec 6, 2020 to Dec 8, 2020: about 160 more stars than usual, peak 78 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
- Jan 10, 2021 to Jan 11, 2021: about 74 more stars than usual, peak 72 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
- Jun 28, 2021 to Jun 29, 2021: about 74 more stars than usual, peak 71 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
- Sep 28, 2025 to Sep 29, 2025: about 124 more stars than usual, peak 116 in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
- 2 stars GitHub has since removed (tracked since Oct 14, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- BSD-4-Clause
- A year ago
- BSD-4-Clause
Packages
No published packages found.
OpenSSF Scorecard: 4.6 out of 10 (via deps.dev).
Sources: GitHub: rapid7/metasploit-framework
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/rapid7/metasploit-framework)Earlier verdicts
- Oct 14, 2026: Healthy
- Oct 14, 2026: Healthy
- Oct 13, 2026: Healthy
Computed 14 hours ago · method 2026.10.2