trufflesecurity/trufflehog
Find, verify, and analyze leaked credentials
28.5k stars · 2.6k forks · Go
Healthy
Healthy: actively maintained by 37 people, no known risks.
Why
No rule fired.
What would change this
- A dormant maintenance status, a deprecated or archived package, a successor link, or a critical advisory would change this.
Maintenance
CompleteActive
- Human commits, 30 days
- 64
- Human commits, 90 days
- 136
- Human commits, 365 days
- 401
- Bot share of commits, 365 days
- 8%
- Last commit
- Oct 14, 2026 (13 hours ago)
- Last human commit
- Oct 14, 2026 (13 hours ago)
- Authors, 90 days
- 37
- Last release
- Oct 8, 2026 (6 days ago)
- Median PR merge time
- 22 hours
Responsiveness: of 24 recent issues, 46% got a maintainer reply. Median first response: 47 hours.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 401 since Oct 14, 2025
- Authors for half of commits
- 6
- Authors for 80% of commits
- 17
- Contributors
- 206
Top committers
- MuneebUllahKhan222: 12% of commits
- mustansir14: 10% of commits
- kashifkhan0771: 9% of commits
- shahzadhaider1: 8% of commits
- rosecodym: 6% of commits
The top committer changed during this period.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- Jan 10, 2018 to Jan 12, 2018: about 36 more stars than usual, peak 16 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Aug 6, 2018 to Aug 7, 2018: about 44 more stars than usual, peak 40 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Jan 9, 2019 to Jan 10, 2019: about 44 more stars than usual, peak 31 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Apr 4, 2022 to Apr 29, 2022: about 1.7k more stars than usual, peak 317 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
- Oct 18, 2022 to Oct 20, 2022: about 56 more stars than usual, peak 31 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Jan 27, 2023 to Jan 27, 2023: about 64 more stars than usual, peak 71 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Apr 26, 2023 to Apr 28, 2023: about 68 more stars than usual, peak 46 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Oct 19, 2023 to Oct 20, 2023: about 145 more stars than usual, peak 114 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Feb 22, 2024 to Feb 28, 2024: about 182 more stars than usual, peak 94 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Jul 25, 2024 to Aug 6, 2024: about 380 more stars than usual, peak 50 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
- Oct 31, 2024 to Nov 14, 2024: about 1k more stars than usual, peak 221 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Jan 27, 2025 to Jan 30, 2025: about 73 more stars than usual, peak 39 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- May 30, 2025 to May 31, 2025: about 93 more stars than usual, peak 76 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Sep 4, 2025 to Sep 23, 2025: about 1.7k more stars than usual, peak 228 in one day, a shape we can't classify. Outside explanation: a jump in forks.
- Nov 25, 2025 to Nov 29, 2025: about 171 more stars than usual, peak 70 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
- Apr 3, 2026 to Apr 6, 2026: about 199 more stars than usual, peak 93 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- May 13, 2026 to May 14, 2026: about 100 more stars than usual, peak 94 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Sep 11, 2026 to Sep 15, 2026: about 123 more stars than usual, peak 53 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- 3 stars GitHub has since removed (tracked since Oct 14, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- AGPL-3.0 (OSI-approved)
- A year ago
- AGPL-3.0 (OSI-approved)
Packages
- github.com/trufflesecurity/trufflehog/v3 (GO): latest v3.99.2, published Oct 8, 2026
Advisories for the latest version: none listed
Package and advisory data: deps.dev and OSV.
OpenSSF Scorecard: 7.4 out of 10 (via deps.dev).
Sources: GitHub: trufflesecurity/trufflehog, deps.dev: Go github.com/trufflesecurity/trufflehog/v3
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/trufflesecurity/trufflehog)Earlier verdicts
- Oct 14, 2026: Healthy
- Oct 14, 2026: Healthy