OWASP WrongSecrets

All repositories

Overview

HEALTH SCORE

Excellent*

Partial score (2/3 categories)

62out of 65

Strong development cadence. Maintainer coverage is the only remaining gap. Security & Supply Chain is unavailable, so weights were redistributed.

LIFECYCLE

Active

Consistent commits, responsive maintainers, regular releases, and healthy issue triage.

Display your project Health score on your GitHub page.

Health breakdown

Excellent*(62/65)

Maintainer availability, known risks and supply chain posture, and whether the project is actively developed or appropriately stable.

Maintainer responsiveness

Median response time is 2 days.

Bus factor

5 active maintainers currently have merge rights.

Organization Diversity

Contributors span 29 organizations.

Project Achievements

Leaderboards

About

OWASP WrongSecrets is an educational project that provides a deliberately vulnerable application containing various types of wrongly configured secrets. It serves as a training tool to help developers and security professionals learn about secure secrets management by demonstrating common mistakes and best practices in handling sensitive information.

First commit

August 2020

Software value

$1M