usestrix/strix
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
68.5k stars · 7.6k forks · Python
Caution
Caution: the median first response takes over 30 days.
Why
- Maintainers took a median of 31 days to first respond to 30 recent issues. (source 1, source 2, source 3, source 4)
What would change this
- Maintainers reply faster, with a median under 30 days.
- Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.)
Maintenance
PartialActive
- Human commits, 30 days
- 114
- Human commits, 90 days
- 315
- Human commits, 365 days
- 793
- Bot share of commits, 365 days
- 11%
- Last commit
- Oct 14, 2026 (1 day ago)
- Last human commit
- Oct 14, 2026 (1 day ago)
- Authors, 90 days
- 21
- Last release
- Oct 5, 2026 (10 days ago)
- Median PR merge time
- under an hour
Responsiveness: of 30 recent issues, 20% got a maintainer reply. Median first response: 31 days.
- Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 446 since Oct 14, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 3
- Contributors
- 72
Top committers
- 0xallam: 61% of commits
- bearsyankees: 15% of commits
- ian-at-strix: 7% of commits
- yoni-at-strix: 3% of commits
- seanturner83: 1% of commits
- Shares come from the newest sampled commits, since the commit sample is capped.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- Sep 9, 2025 to Sep 17, 2025: about 600 more stars than usual, peak 240 in one day, a spike that tapers off. We couldn't check for an outside explanation.
- Nov 5, 2025 to Dec 9, 2025: about 14.3k more stars than usual, peak 2.2k in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Feb 20, 2026 to Feb 23, 2026: about 296 more stars than usual, peak 131 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Mar 23, 2026 to Apr 3, 2026: about 1.7k more stars than usual, peak 501 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jun 27, 2026 to Aug 7, 2026: about 22.6k more stars than usual, peak 2.6k in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in issues and pull requests.
- Aug 17, 2026 to Aug 22, 2026: about 2k more stars than usual, peak 1.1k in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
- 12 stars GitHub has since removed (tracked since Oct 13, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- Apache-2.0 (OSI-approved)
- A year ago
- Apache-2.0 (OSI-approved)
Packages
No published packages found.
Sources: GitHub: usestrix/strix
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/usestrix/strix)Earlier verdicts
- Oct 14, 2026: Caution
- Oct 13, 2026: Caution
- Oct 13, 2026: Caution
Computed 18 hours ago · method 2026.10.2