← Latest products

CLI that spots fake GitHub stars

risky dependencies and licence traps. CLI that detects fake-star campaigns, dependency hijacks, licence red-flags and other signs of repository risk. Inspired by the “4.5 million fake stars” study, StarGuard helps CTOs, security teams and investors perform fast, automated open-source due-diligence. When I came across a study that traced 4.5 million fake GitHub stars, it confirmed a suspicion I’d had for a while: stars are noisy.

CLIOpen source

501 stars · GitHubexternal site

Visit github.comexternal site

Reactions (1)

Similar products

by description similarity

  1. Watch GitHub get spammed in real time

    play.trytrench.com

    For the past month, we've been monitoring GitHub's public event stream to catch spam comments and fake stars.

    Hacker News35 pts

  2. Similarity = cosine(your_GitHub_stars

    puzer.github.io

    Karpathy) Client-side

    Hacker News172 pts

  3. Leaderboard of Top GitHub Repositories Based on Stars

    githublb.vercel.app

    Discover the top starred GitHub repositories, including Computer Vision projects. Explore popular projects and track star trends.

    Hacker News10 pts

  4. I built a PR listener and ruleset to detect malicious code in CI/CD

    github.com

    Prevent merging of malicious code in pull requests

    Hacker News13 pts

  5. Stargazers Reloaded

    news.ycombinator.com

    LLM-Powered Analyses of Your GitHub Community

    Hacker News20 pts