sqlmapproject/sqlmap
Automatic SQL injection and database takeover tool
38.7k stars · 6.4k forks · Python
Caution
Caution: one person wrote most of the recent commits.
Why
- One person wrote 99% of human commits in the last year, so the project depends on them continuing. (source 1, source 2)
What would change this
- A second person takes a substantial share of commits.
- Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.)
Maintenance
PartialActive
- Human commits, 30 days
- 26
- Human commits, 90 days
- 235
- Human commits, 365 days
- 773
- Bot share of commits, 365 days
- 0%
- Last commit
- Oct 11, 2026 (3 days ago)
- Last human commit
- Oct 11, 2026 (3 days ago)
- Authors, 90 days
- 3
- Last release
- Jan 1, 2026 (9 months ago)
- Median PR merge time
- 28 hours
Responsiveness: of 27 recent issues, 100% got a maintainer reply. Median first response: 5 hours.
- Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 500 since Oct 14, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 1
- Contributors
- 140
Top committers
- stamparm: 99% of commits
- zakaria-zoulati: 1% of commits
- chan770: 0% of commits
- MRX-72: 0% of commits
- Shares come from the newest sampled commits, since the commit sample is capped.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- Dec 1, 2015 to Dec 4, 2015: about 414 more stars than usual, peak 225 in one day, a spike that tapers off. Outside explanation: a Hacker News post.
- May 16, 2016 to May 18, 2016: about 97 more stars than usual, peak 64 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Oct 23, 2023 to Oct 24, 2023: about 126 more stars than usual, peak 107 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Nov 27, 2023 to Dec 1, 2023: about 156 more stars than usual, peak 74 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Jun 18, 2025 to Jun 19, 2025: about 106 more stars than usual, peak 89 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- 655 stars on a repo created before February 2013 have no date, so they aren't in the chart.
- 5 stars GitHub has since removed (tracked since Oct 14, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
- 655 stars on the creation day are undated (before 2013-02-10) and are not counted.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- GPL-2.0 (OSI-approved)
- A year ago
- GPL-2.0 (OSI-approved)
Packages
No published packages found.
OpenSSF Scorecard: 4.8 out of 10 (via deps.dev).
Sources: GitHub: sqlmapproject/sqlmap
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/sqlmapproject/sqlmap)Earlier verdicts
- Oct 14, 2026: Caution
- Oct 14, 2026: Caution
- Oct 13, 2026: Caution
Computed 14 hours ago · method 2026.10.2