JavaScript · Apache-2.0
vmihalis/hacker-bob
A local MCP runtime that attacks what you own and only reports what it proved. 17 CVEs across 9 projects came out of this repo. Install: npx -y hacker-bob@latest install /path/to/project, then run /bob-evaluate target.com
★ 101
Stars
18 forks · 27 open issues
+3.2/wk
Growth · lifetime avg
Average since the repo was created — it is young enough that this still describes now. Not a recent-week figure.
23.0
Momentum / 100
see the breakdown below
7mo ago
Created
last push 14d ago
Star history
Only 1 snapshot so far — we started watching
this repository on 2026-11-05.
The chart appears once there are two days to compare.
How this score was built
| Component | Weight | Earned | Why |
|---|---|---|---|
| Velocity | 55 | 3.2 | +3.2/wk, log-scaled against a 750/day ceiling |
| Acceleration | 15 | 0.0 | needs 7-day and 30-day rates side by side |
| Freshness | 15 | 14.0 | last push 14d ago; decays to zero at 180 days |
| Scale | 15 | 5.8 | 101 stars, log-scaled against 150k — stops a 3-star repo topping the board |
| Momentum | 100 | 23.0 | sum of the above |
Detail
| Topics | appsecclaude-codecvefuzzingmcpmodel-context-protocoloffensive-securitypentestingsecuritysmart-contract-security |
| Matched on | Security (pentesting) |
| Short window | no snapshot 5–10 days old yet |
| Long window | no snapshot 14–45 days old yet |
| Lifetime average | 0.46 stars/day over 219 days |
| First seen here | 2026-11-05 |
| Last read | 2d ago |