minimaxir /big-list-of-naughty-strings
The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.
- Stars
- 47,716 stars
- Forks
- 2,147 forks
- Language
- Python
- License
- MIT
- Created
- Aug 8, 2015
- Last push
- Apr 18, 2024
- Updated
- Nov 4, 2026
Why these Tags: an agent read the README and quoted it
- Fake data generator from the description:
a list of strings which have a high probability of causing issues when used as user-input data
An agent gave these Tags from the fixed Tag list in the AwesomeRepos source code. A code check kept each Tag only when its quote is in the text. A wrong Tag? Report an errorwith the form at the end of this page.
In the Repository Index since Oct 22, 2026.
Star History
193 days recorded, Apr 26, 2026 – Nov 4, 2026 (UTC). Net change +270 stars.
The star count of each day is the latest count minus the net stars of the later days.
Add this Star History to a README
The images follow the light or dark theme of the page that shows them, and update every hour. Add ?theme=light or ?theme=darkto the chart address to keep one theme.
Star History chart
[](https://awesomerepos.com/minimaxir/big-list-of-naughty-strings)Badge
[](https://awesomerepos.com/minimaxir/big-list-of-naughty-strings)Timeline
It gained stars on 136 of the 193 days recorded since Apr 26, 2026.
Its largest 7 days were Jun 1, 2026 to Jun 7, 2026: 31 stars.
In the 30 days to Nov 4, 2026 it got 15 stars, 61% fewer than in the 30 days before.
It had 47,446 stars before Apr 26, 2026 and has 47,716 stars now: 2,284 fewer than 50,000.
- Created on the Repository Host
- Latest push
- +12 stars in one day
- Largest star day recorded: +13 stars
- +12 stars in one day
- Entered the Repository Index
The timeline comes from the creation date and the releases on the Repository Host, the Admission, the Star History, and the Observations. Star milestones show only when the Star History records the day. The list shows up to 5 stable releases from the latest 10 releases recorded. When none of them is stable, one item counts the pre-releases. On the chart of net stars each day, a solid line marks each recorded release.
Forks and pushes
From 15 Observations, Oct 22, 2026 – Nov 5, 2026. Forks +1. AwesomeRepos saw a new push on 0 of 14 days.
- Oct 23, 2026: no new push
- Oct 24, 2026: no new push
- Oct 25, 2026: no new push
- Oct 26, 2026: no new push
- Oct 27, 2026: no new push
- Oct 28, 2026: no new push
- Oct 29, 2026: no new push
- Oct 30, 2026: no new push
- Oct 31, 2026: no new push
- Nov 1, 2026: no new push
- Nov 2, 2026: no new push
- Nov 3, 2026: no new push
- Nov 4, 2026: no new push
- Nov 5, 2026: no new push
A filled day: the last push time changed since the Observation before it.
Health facts
Measured facts in four separate dimensions, each with a date and a source. AwesomeRepos does not add them into one score. AwesomeRepos last read these facts from GitHub on Nov 3, 2026. How AwesomeRepos defines each check
Maintenance
1 of 4 checksYes: Not archived
GitHub does not mark the repository as archived. Source
No: A push in the last 90 days
Last push on 2024-04-18, 931 days ago. Source
No: Commits in the last 13 weeks
0 commits on the default branch in the last 13 weeks (GitHub, 2026-11-03). Source
No: Commits in 26 or more of the last 52 weeks
Commits in 0 of the last 52 weeks (GitHub, 2026-11-03). Source
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
- 0
Releases
0 of 3 checks (1 without data)No: A release in the last 365 days
No GitHub release (read on 2026-11-05). Source
No data: The newest release tag is a semantic version
No data: no release.
No: A changelog file at the root
No changelog file at the root (GitHub, 2026-11-03).
Security practice
0 of 1 checkNo: A security policy
GitHub finds no security policy (GitHub, 2026-11-03).
OpenSSF Scorecard: 14 checks on Oct 26, 2026
Each check has its own score, from 0 to 10. AwesomeRepos does not show the Scorecard aggregate score, and these checks are not in the count above. Source
- Binary-Artifacts
- 10 of 10
- Branch-Protection
- 0 of 10
- CII-Best-Practices
- 0 of 10
- Code-Review
- 8 of 10
- Dangerous-Workflow
- No result
- Fuzzing
- 0 of 10
- License
- 10 of 10
- Maintained
- 0 of 10
- Packaging
- No result
- Pinned-Dependencies
- No result
- SAST
- 0 of 10
- Security-Policy
- 0 of 10
- Signed-Releases
- No result
- Token-Permissions
- No result
Community files
1 of 3 checksYes: A licence
GitHub finds the licence MIT. Source
No: A contributing guide
GitHub finds no contributing guide (GitHub, 2026-11-03).
No: A code of conduct
GitHub finds no code of conduct (GitHub, 2026-11-03).
Dependencies in the index
This section shows the packages that connect this repository to other repositories in the index.
The GitHub dependency graph of this repository names 0 direct packages (scanned on Nov 3, 2026). None of them comes from another repository in the index.
No scanned repository names a package from this repository.
Uses (in the index) · 0
None.
Used by (in the index) · 0
None.
Sources: the GitHub dependency graph of each repository, and deps.dev for the source repository of each package. A dependency graph also names development packages. deps.dev takes most source repositories from package metadata. How the dependency graph is made
Observations
Latest Observation, Nov 5, 2026: 47,716 stars, 2,147 forks, last push Apr 18, 2024, not archived. One of 15 Observations since Oct 22, 2026.