Top Ruby Gems: https://github.com/sparklemotion/nokogiri
libxml2 libxslt nokogiri ruby ruby-gem sax xerces xml xslt
Score: 36.68780976886896
Last synced: about 14 hours ago
JSON representation
Repository metadata:
Nokogiri (鋸) makes it easy and painless to work with XML and HTML from Ruby.
- Host: GitHub
- URL: https://github.com/sparklemotion/nokogiri
- Owner: sparklemotion
- License: mit
- Created: 2008-07-14T15:34:32.000Z (over 17 years ago)
- Default Branch: main
- Last Pushed: 2026-01-19T07:20:03.000Z (16 days ago)
- Last Synced: 2026-01-31T09:30:22.972Z (4 days ago)
- Topics: libxml2, libxslt, nokogiri, ruby, ruby-gem, sax, xerces, xml, xslt
- Language: C
- Homepage: https://nokogiri.org/
- Size: 37 MB
- Stars: 6,228
- Watchers: 149
- Forks: 932
- Open Issues: 110
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- Funding: .github/FUNDING.yml
- License: LICENSE-DEPENDENCIES.md
- Code of conduct: CODE_OF_CONDUCT.md
- Security: SECURITY.md
- Roadmap: ROADMAP.md
-
Funding:
- Github: flavorjones
- Tidelift: rubygems/nokogiri
- Open collective: nokogiri
Owner metadata:
- Name: Sparkle Motion
- Login: sparklemotion
- Email:
- Kind: organization
- Description:
- Website: http://nokogiri.org/
- Location:
- Twitter:
- Company:
- Icon url: https://avatars.githubusercontent.com/u/1851072?v=4
- Repositories: 11
- Last Synced at: 2025-08-11T11:42:31.295Z
- Profile URL: https://github.com/sparklemotion
GitHub Events
Total
- Commit comment event: 3
- Create event: 131
- Delete event: 105
- Discussion event: 1
- Fork event: 44
- Issue comment event: 475
- Issues event: 117
- Pull request event: 310
- Pull request review comment event: 105
- Pull request review event: 91
- Push event: 317
- Release event: 16
- Watch event: 107
- Total: 1822
Last Year
- Create event: 64
- Delete event: 54
- Discussion event: 1
- Fork event: 30
- Issue comment event: 292
- Issues event: 79
- Pull request event: 163
- Pull request review comment event: 70
- Pull request review event: 57
- Push event: 148
- Release event: 8
- Watch event: 68
- Total: 1034
Committers metadata
Last synced: 2 days ago
Total Commits: 6,648
Total Committers: 271
Avg Commits per committer: 24.531
Development Distribution Score (DDS): 0.514
Commits in past year: 116
Committers in past year: 12
Avg Commits per committer in past year: 9.667
Development Distribution Score (DDS) in past year: 0.431
| Name | Commits | |
|---|---|---|
| Mike Dalessio | m****o@g****m | 3228 |
| Aaron Patterson | a****n@g****m | 1143 |
| Yoko Harada | y****t@g****m | 266 |
| Akinori MUSHA | k****u@i****g | 210 |
| dependabot[bot] | 4****] | 180 |
| Stephen Checkoway | s****@p****g | 164 |
| John Shahid | j****d@g****m | 158 |
| kares | s****f@k****g | 151 |
| Craig Barnes | C****r@i****s | 139 |
| Sam Ruby | r****s@i****t | 120 |
| Lars Kanis | l****s@g****e | 99 |
| Serabe | s****e@g****m | 83 |
| Sergio Arbeo | s****o@Y****) | 56 |
| Timothy Elliott | t****e@h****m | 39 |
| Nobuyoshi Nakada | n****u@r****g | 25 |
| Patrick Mahoney | p****t@p****g | 24 |
| BurdetteLamar | b****r@y****m | 17 |
| Lee Jarvis | l****s@g****m | 13 |
| Charles Oliver Nutter | h****s@h****m | 12 |
| Michael Klein | m****n@g****m | 12 |
| Charles Nutter | h****s@c****l | 11 |
| Thomas Walpole | t****e@g****m | 10 |
| Ben Langfeld | b****n@l****e | 10 |
| fuzzy-boiii23a | f****a@g****m | 9 |
| Rafael Masson | r****n@g****m | 9 |
| ujihisa | u****a@g****m | 8 |
| Étienne Barrié | e****e@g****m | 8 |
| Jeff Hodges | j****f@s****m | 8 |
| John Barnette | j****e@g****m | 7 |
| Toshi MARUYAMA | m****2@y****p | 7 |
| and 241 more... | ||
Issue and Pull Request metadata
Last synced: 7 days ago
Total issues: 289
Total pull requests: 810
Average time to close issues: almost 2 years
Average time to close pull requests: 26 days
Total issue authors: 165
Total pull request authors: 55
Average comments per issue: 3.5
Average comments per pull request: 0.98
Merged pull request: 605
Bot issues: 1
Bot pull requests: 226
Past year issues: 47
Past year pull requests: 165
Past year average time to close issues: 10 days
Past year average time to close pull requests: 7 days
Past year issue authors: 30
Past year pull request authors: 15
Past year average comments per issue: 1.68
Past year average comments per pull request: 0.99
Past year merged pull request: 89
Past year bot issues: 0
Past year bot pull requests: 52
Top Issue Authors
- flavorjones (92)
- Ruiizgaby4 (5)
- stevecheckoway (5)
- forthrin (5)
- BurdetteLamar (4)
- utilitpy (4)
- johnnyshields (4)
- nathan-nhm (2)
- doriantaylor (2)
- adfoster-r7 (2)
- ilyazub (2)
- JJLeo (2)
- searls (2)
- x-yuri (2)
- Mange (2)
Top Pull Request Authors
- flavorjones (423)
- dependabot[bot] (226)
- BurdetteLamar (37)
- stevecheckoway (15)
- infews (9)
- openbl (8)
- MattJones (6)
- etiennebarrie (6)
- maths22 (4)
- yokolet (3)
- fuzzy-boiii23a (3)
- headius (3)
- step-security-bot (3)
- peterzhu2118 (3)
- mononoken (2)
Top Issue Labels
- state/needs-triage (44)
- platform/jruby (32)
- topic/installation (26)
- help wanted (20)
- topic/memory (19)
- meta/user-help (19)
- meta/spam (12)
- topic/namespaces (11)
- needs/research (10)
- upstream/libxml2 (10)
- topic/performance (9)
- topic/error-handling (9)
- state/will-close (8)
- topic/gumbo (8)
- topic/ci (7)
- meta/feature-request (7)
- topic/encoding (7)
- topic/HTML5 (7)
- needs/more-info (6)
- topic/css (6)
- topic/entities (5)
- topic/xsd (5)
- vendored/libxml2 (4)
- topic/documentation (4)
- meta/discussion (3)
- vendored/nekohtml (2)
- topic/builder (2)
- packaging/native-gem (2)
- topic/fragment (2)
- topic/security (2)
Top Pull Request Labels
- dependencies (229)
- ruby (170)
- event/hackday2024 (26)
- backport (25)
- platform/jruby (25)
- vendored/libxml2 (24)
- github_actions (21)
- topic/ci (20)
- topic/memory (12)
- topic/performance (11)
- topic/namespaces (9)
- upstream/libxml2 (9)
- topic/security (9)
- topic/entities (6)
- topic/HTML5 (4)
- meta/spam (3)
- vendored/zlib (3)
- state/pr-under-review (3)
- hackday (2)
- vendored/iconv (2)
- topic/builder (2)
- topic/xsd (2)
- needs/research (2)
- meta/feature-request (2)
- topic/sax (2)
- topic/installation (2)
- vendored/libxslt (2)
- topic/css (2)
- topic/documentation (2)
- topic/gumbo (2)
Package metadata
- Total packages: 7
-
Total downloads:
- rubygems: 2,250,216,227 total
- Total docker downloads: 2,742,024,274
- Total dependent packages: 8,059 (may contain duplicates)
- Total dependent repositories: 1,093,702 (may contain duplicates)
- Total versions: 2,291
- Total maintainers: 5
- Total advisories: 101
gem.coop: nokogiri
Nokogiri (鋸) makes it easy and painless to work with XML and HTML from Ruby. It provides a sensible, easy-to-understand API for reading, writing, modifying, and querying documents. It is fast and standards-compliant by relying on native parsers like libxml2, libgumbo, or xerces.
- Homepage: https://nokogiri.org
- Documentation: http://www.rubydoc.info/gems/nokogiri/
- Licenses: MIT
- Latest release: 1.19.0 (published about 1 month ago)
- Last Synced: 2026-02-02T12:09:59.539Z (2 days ago)
- Versions: 1,141
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 1,133,994,661 Total
- Docker Downloads: 1,371,012,137
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Downloads: 0.008%
- Average: 0.019%
- Docker downloads count: 0.069%
- Maintainers (3)
-
Advisories:
- Update bundled libxml2 to v2.10.3 to resolve multiple CVEs
- Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEs
- Nokogiri vulnerable to libxml XML Entity Expansion
- Nokogiri updates packaged dependency on libxml2 from 2.9.10 to 2.9.12
- Nokogiri Improperly Handles Unexpected Data Type
- Integer Overflow or Wraparound in libxml2 affects Nokogiri
- Vulnerable dependencies in Nokogiri
- Nokogiri update packaged libxml2 to v2.12.5 to resolve CVE-2024-25062
- Nokogiri vulnerable to DoS while parsing XML documents
- XML Injection in Xerces Java affects Nokogiri
- sparklemotion nokogiri hashmap.c hashmap_get_with_hash heap-based overflow
- Duplicate Advisory: Use-after-free in libxml2 via Nokogiri::XML::Reader
- Unchecked return value from xmlTextReaderExpand
- Nokogiri contains libxml Out-of-bounds Write vulnerability
- Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459
- Nokogiri updates packaged libxml2 to v2.13.8 to resolve CVE-2025-32414 and CVE-2025-32415
- Nokogiri patches vendored libxml2 to resolve multiple CVEs
- Duplicate Advisory: Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459
- Heap-based buffer overflow in nokogiri
- Nokogiri Command Injection Vulnerability
- Nokogiri NULL Pointer Dereference
- Uncontrolled resource consumption in nokogiri
- Nokogiri gem, via libxml, is affected by DoS vulnerabilities
- Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby
- Nokogiri is vulnerable to XML External Entity (XXE) attack
- Nokogiri updates packaged libxslt to v1.1.43 to resolve multiple CVEs
- Nokogiri gem, via libxml, is affected by DoS vulnerabilities
- Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability
- Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing
- Uninitialized read in Nokogiri gem
- Nokogiri Implements libxml2 version vulnerable to use-after-free
- Nokogiri affected by zlib's Out-of-bounds Write vulnerability
- Nokogiri vulnerable to libxslt protection mechanism bypass
- Nokogiri does not forbid namespace nodes in XPointer ranges
- Nokogiri subject to DoS via libxml2 vulnerability
- Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171
- Denial of service or RCE from libxml2 and libxslt
- Nokogiri implementation of libxslt vulnerable to heap corruption
- Denial of Service (DoS) in Nokogiri on JRuby
- Out-of-bounds Write in zlib affects Nokogiri
- Nokogiri Inefficient Regular Expression Complexity
- Duplicate Advisory: Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171
- libxslt Type Confusion vulnerability that affects Nokogiri
- Nokogiri has vulnerable dependencies on libxml2 and libxslt
- Out-of-bounds read in nokogiri
- Nokogiri implementation of libxslt lacks integer overflow checks
- libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation
- Nokogiri vulnerable to DoS while parsing XML entities
- sparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflow
- Cross-site Scripting in loofah
- Nokogiri::XML::Schema trusts input by default, exposing risk of XXE vulnerability
rubygems.org: nokogiri
Nokogiri (鋸) makes it easy and painless to work with XML and HTML from Ruby. It provides a sensible, easy-to-understand API for reading, writing, modifying, and querying documents. It is fast and standards-compliant by relying on native parsers like libxml2, libgumbo, or xerces.
- Homepage: https://nokogiri.org
- Documentation: http://www.rubydoc.info/gems/nokogiri/
- Licenses: MIT
- Latest release: 1.19.0 (published about 1 month ago)
- Last Synced: 2025-12-28T19:16:58.650Z (about 1 month ago)
- Versions: 1,143
- Dependent Packages: 8,056
- Dependent Repositories: 1,093,699
- Downloads: 1,116,217,828 Total
- Docker Downloads: 1,371,012,137
-
Rankings:
- Dependent repos count: 0.003%
- Dependent packages count: 0.007%
- Downloads: 0.012%
- Docker downloads count: 0.096%
- Average: 0.132%
- Stargazers count: 0.193%
- Forks count: 0.482%
- Maintainers (3)
-
Advisories:
- Nokogiri patches vendored libxml2 to resolve multiple CVEs
- sparklemotion nokogiri hashmap.c hashmap_get_with_hash heap-based overflow
- sparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflow
- Nokogiri updates packaged libxml2 to v2.13.8 to resolve CVE-2025-32414 and CVE-2025-32415
- Nokogiri updates packaged libxslt to v1.1.43 to resolve multiple CVEs
- Duplicate Advisory: Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171
- Nokogiri updates packaged libxml2 to 2.13.6 to resolve CVE-2025-24928 and CVE-2024-56171
- Duplicate Advisory: Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459
- Nokogiri updates packaged libxml2 to v2.12.7 to resolve CVE-2024-34459
- Duplicate Advisory: Use-after-free in libxml2 via Nokogiri::XML::Reader
- Nokogiri update packaged libxml2 to v2.12.5 to resolve CVE-2024-25062
- Nokogiri updates packaged libxml2 to v2.10.4 to resolve multiple CVEs
- Unchecked return value from xmlTextReaderExpand
- Update bundled libxml2 to v2.10.3 to resolve multiple CVEs
- Nokogiri has vulnerable dependencies on libxml2 and libxslt
- Nokogiri contains libxml Out-of-bounds Write vulnerability
- Nokogiri Implements libxml2 version vulnerable to use-after-free
- Nokogiri Implements libxml2 version vulnerable to null pointer dereferencing
- Nokogiri implementation of libxslt vulnerable to heap corruption
- Nokogiri affected by libxslt Use of Uninitialized Resource/Use After Free vulnerability
- libxslt Type Confusion vulnerability that affects Nokogiri
- Uninitialized read in Nokogiri gem
- Nokogiri Improperly Handles Unexpected Data Type
- Integer Overflow or Wraparound in libxml2 affects Nokogiri
- Nokogiri gem, via libxml, is affected by DoS vulnerabilities
- Nokogiri vulnerable to libxslt protection mechanism bypass
- Nokogiri gem, via libxml, is affected by DoS vulnerabilities
- Nokogiri vulnerable to DoS while parsing XML documents
- Nokogiri vulnerable to DoS while parsing XML entities
- Nokogiri is vulnerable to XML External Entity (XXE) attack
- Denial of Service (DoS) in Nokogiri on JRuby
- XML Injection in Xerces Java affects Nokogiri
- Out-of-bounds Write in zlib affects Nokogiri
- Nokogiri Inefficient Regular Expression Complexity
- Nokogiri affected by zlib's Out-of-bounds Write vulnerability
- Vulnerable dependencies in Nokogiri
- Improper Restriction of XML External Entity Reference (XXE) in Nokogiri on JRuby
- Nokogiri updates packaged dependency on libxml2 from 2.9.10 to 2.9.12
- Nokogiri::XML::Schema trusts input by default, exposing risk of XXE vulnerability
- libxml as used in Nokogiri has an infinite loop in a certain end-of-file situation
- Nokogiri Command Injection Vulnerability
- Nokogiri NULL Pointer Dereference
- Heap-based buffer overflow in nokogiri
- Denial of service or RCE from libxml2 and libxslt
- Nokogiri does not forbid namespace nodes in XPointer ranges
- Nokogiri subject to DoS via libxml2 vulnerability
- Nokogiri vulnerable to libxml XML Entity Expansion
- Nokogiri implementation of libxslt lacks integer overflow checks
- Uncontrolled resource consumption in nokogiri
- Out-of-bounds read in nokogiri
conda-forge.org: rb-nokogiri
- Homepage: https://rubygems.org/gems/nokogiri
- Licenses: MIT
- Latest release: 1.10.10 (published almost 5 years ago)
- Last Synced: 2026-01-06T00:08:06.718Z (29 days ago)
- Versions: 3
- Dependent Packages: 3
- Dependent Repositories: 3
-
Rankings:
- Stargazers count: 4.432%
- Forks count: 5.046%
- Average: 10.747%
- Dependent packages count: 15.618%
- Dependent repos count: 17.894%
gem.coop: Nokogiri_precompiled_aarch64_dedshit
Nokogiri (鋸) makes it easy and painless to work with XML and HTML from Ruby. It provides a sensible, easy-to-understand API for reading, writing, modifying, and querying documents. It is fast and standards-compliant by relying on native parsers like libxml2, libgumbo, or xerces.
- Homepage: https://nokogiri.org
- Documentation: http://www.rubydoc.info/gems/Nokogiri_precompiled_aarch64_dedshit/
- Licenses: MIT
- Latest release: 1.14.5 (published about 2 years ago)
- Last Synced: 2026-01-30T07:26:15.857Z (5 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 1,006 Total
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 32.38%
- Downloads: 97.139%
- Maintainers (1)
gem.coop: nokogiri-backport
Nokogiri (鋸) makes it easy and painless to work with XML and HTML from Ruby. It provides a sensible, easy-to-understand API for reading, writing, modifying, and querying documents. It is fast and standards-compliant by relying on native parsers like libxml2 (C) and xerces (Java).
- Homepage: https://nokogiri.org
- Documentation: http://www.rubydoc.info/gems/nokogiri-backport/
- Licenses: MIT
- Latest release: 1.11.0 (published almost 2 years ago)
- Last Synced: 2026-01-30T07:26:51.391Z (5 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 863 Total
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 32.717%
- Downloads: 98.151%
- Maintainers (1)
rubygems.org: nokogiri-backport
Nokogiri (鋸) makes it easy and painless to work with XML and HTML from Ruby. It provides a sensible, easy-to-understand API for reading, writing, modifying, and querying documents. It is fast and standards-compliant by relying on native parsers like libxml2 (C) and xerces (Java).
- Homepage: https://nokogiri.org
- Documentation: http://www.rubydoc.info/gems/nokogiri-backport/
- Licenses: MIT
- Latest release: 1.11.0 (published almost 2 years ago)
- Last Synced: 2026-01-30T07:26:38.809Z (5 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 863 Total
-
Rankings:
- Dependent packages count: 15.712%
- Dependent repos count: 48.743%
- Average: 54.591%
- Downloads: 99.32%
- Maintainers (1)
rubygems.org: Nokogiri_precompiled_aarch64_dedshit
Nokogiri (鋸) makes it easy and painless to work with XML and HTML from Ruby. It provides a sensible, easy-to-understand API for reading, writing, modifying, and querying documents. It is fast and standards-compliant by relying on native parsers like libxml2, libgumbo, or xerces.
- Homepage: https://nokogiri.org
- Documentation: http://www.rubydoc.info/gems/Nokogiri_precompiled_aarch64_dedshit/
- Licenses: MIT
- Latest release: 1.14.5 (published about 2 years ago)
- Last Synced: 2026-01-30T07:26:00.979Z (5 days ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 1,006 Total
-
Rankings:
- Dependent packages count: 15.777%
- Dependent repos count: 48.976%
- Average: 54.71%
- Downloads: 99.378%
- Maintainers (1)
Dependencies
- actions/cache v4 composite
- actions/checkout v5 composite
- actions/download-artifact v5 composite
- actions/upload-artifact v4 composite
- cachix/install-nix-action v31 composite
- ruby/setup-ruby v1 composite
- ruby/setup-ruby-pkgs v1 composite
- vmactions/freebsd-vm v1 composite
- actions/cache v4 composite
- actions/checkout v5 composite
- actions/checkout v5 composite
- docker/build-push-action v6 composite
- docker/login-action v3 composite
- docker/setup-buildx-action v3 composite
- ruby/setup-ruby v1 composite
- actions/cache v4 composite
- actions/checkout v5 composite
- actions/setup-java v5 composite
- ruby/setup-ruby v1 composite
- ruby/setup-ruby-pkgs v1 composite
- bundler ~> 2.3 development
- minitest = 5.25.5 development
- minitest-parallel_fork = 2.1.0 development
- rake = 13.3.0 development
- rake-compiler = 1.3.0 development
- rake-compiler-dock = 1.9.1 development
- rexical = 1.0.8 development
- rubocop-minitest = 0.38.2 development
- rubocop-packaging = 0.6.0 development
- rubocop-rake = 0.7.1 development
- ruby_memcheck = 3.0.1 development
- rubyzip ~> 3.1.0 development
- simplecov = 0.22.0 development
- standard = 1.50.0 development
- mini_portile2 ~> 2.8.2
- racc ~> 1.4