Top Ruby Gems: https://github.com/flavorjones/loofah
Score: 32.94185124884035
Last synced: about 3 hours ago
JSON representation
Repository metadata:
Ruby library for HTML/XML transformation and sanitization
- Host: GitHub
- URL: https://github.com/flavorjones/loofah
- Owner: flavorjones
- License: mit
- Created: 2009-08-08T06:04:37.000Z (about 17 years ago)
- Default Branch: main
- Last Pushed: 2026-07-15T19:57:38.000Z (29 days ago)
- Last Synced: 2026-08-01T16:11:36.966Z (12 days ago)
- Language: Ruby
- Homepage:
- Size: 1.21 MB
- Stars: 1,000
- Watchers: 10
- Forks: 144
- Open Issues: 19
-
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Funding: .github/FUNDING.yml
- License: MIT-LICENSE.txt
- Security: SECURITY.md
-
Funding:
- Github: flavorjones
- Tidelift: rubygems/loofah
Owner metadata:
- Name: Mike Dalessio
- Login: flavorjones
- Email:
- Kind: user
- Description: Part-time OSS contributor, maintaining Nokogiri, Loofah, Rails::Html::Sanitizer, Mechanize, Sqlite3, and more in the Ruby ecosystem.
- Website: http://mike.daless.io/
- Location: New York City / New Jersey
- Twitter: flavorjones
- Company:
- Icon url: https://avatars.githubusercontent.com/u/8207?u=b696c885624fac0e15405b8713a770e888f26a96&v=4
- Repositories: 166
- Last Synced at: 2024-10-29T17:10:21.650Z
- Profile URL: https://github.com/flavorjones
GitHub Events
Total
- Create event: 10
- Delete event: 7
- Fork event: 7
- Issue comment event: 18
- Issues event: 1
- Pull request event: 21
- Push event: 27
- Release event: 4
- Watch event: 33
- Total: 128
Last Year
- Create event: 2
- Delete event: 3
- Fork event: 2
- Issues event: 1
- Pull request event: 1
- Push event: 8
- Watch event: 13
- Total: 30
Committers metadata
Last synced: 11 days ago
Total Commits: 747
Total Committers: 64
Avg Commits per committer: 11.672
Development Distribution Score (DDS): 0.169
Commits in past year: 18
Committers in past year: 1
Avg Commits per committer in past year: 18.0
Development Distribution Score (DDS) in past year: 0.0
| Name | Commits | |
|---|---|---|
| Mike Dalessio | m****e@c****t | 621 |
| Bryan Helmkamp | b****n@b****m | 15 |
| Olle Jonsson | o****n@g****m | 14 |
| Juanito Fatas | k****0@g****m | 10 |
| Timm | k****h@g****m | 9 |
| Jose Colella | j****a@g****m | 4 |
| Orien Madgwick | _****@o****o | 3 |
| Ken Dreyer | k****r@k****m | 3 |
| Aaron Patterson | a****n@g****m | 3 |
| Juanito Fatas | j****s@s****m | 3 |
| m-nakamura145 | m****5@g****m | 2 |
| Tarcisio Ferraz | t****z@p****m | 2 |
| Adam Sokolnicki | a****i@g****m | 2 |
| James Adam | j****s@l****m | 2 |
| Jun Aruga | j****a@r****m | 2 |
| MothOnMars | m****s@g****m | 2 |
| Nick DeSteffen | n****n@g****m | 2 |
| Niko Roberts | n****o@t****m | 2 |
| Brendon Muir | b****n@s****z | 1 |
| Ben Atkins | b****z@g****m | 1 |
| Bao Pham | g****m@g****m | 1 |
| Anton Rieder | 1****r | 1 |
| Andrey Nering | a****g@g****m | 1 |
| Andrew Nesbitt | a****z@g****m | 1 |
| Matt Swanson | m****n@s****m | 1 |
| Bill Chaney | b****l@a****o | 1 |
| Fabian Winkler | 1 | |
| Jen-Mei Wu and Tommy Devol | p****y@i****m | 1 |
| Laurent Cobos | l****t@1****r | 1 |
| Rafael Mendonça França | r****a@p****r | 1 |
| and 34 more... | ||
Issue and Pull Request metadata
Last synced: 1 day ago
Total issues: 49
Total pull requests: 108
Average time to close issues: 6 months
Average time to close pull requests: about 1 month
Total issue authors: 37
Total pull request authors: 39
Average comments per issue: 4.0
Average comments per pull request: 1.73
Merged pull request: 78
Bot issues: 0
Bot pull requests: 2
Past year issues: 2
Past year pull requests: 6
Past year average time to close issues: N/A
Past year average time to close pull requests: about 4 hours
Past year issue authors: 2
Past year pull request authors: 2
Past year average comments per issue: 0.5
Past year average comments per pull request: 1.33
Past year merged pull request: 5
Past year bot issues: 0
Past year bot pull requests: 0
Top Issue Authors
- flavorjones (10)
- stefannibrasil (2)
- bbugh (2)
- epinault (2)
- rocketedaway (1)
- lessless (1)
- unikitty37 (1)
- miguelperez (1)
- jarkko (1)
- th0r (1)
- davidjstein (1)
- piyush-ally (1)
- jmjohnson (1)
- puneet-sutar (1)
- brendon (1)
Top Pull Request Authors
- flavorjones (53)
- lazyatom (4)
- m-nakamura145 (4)
- factcondenser (2)
- josecolella (2)
- nick-desteffen (2)
- andrew (2)
- headius (2)
- Earlopain (2)
- JuanitoFatas (2)
- lucyxiang (2)
- troym9731 (2)
- dependabot-preview[bot] (2)
- fnando (2)
- cjba7 (1)
Top Issue Labels
- user-help (4)
- feature (3)
- allowlist (3)
- will-close (2)
- needs more information (2)
- discussion (2)
- scrubbers (1)
- blocked (1)
Top Pull Request Labels
- dependencies (2)
- pr-under-review (1)
- needs more information (1)
Package metadata
- Total packages: 16
-
Total downloads:
- rubygems: 1,462,674,318 total
- Total docker downloads: 1,642,149,450
- Total dependent packages: 88 (may contain duplicates)
- Total dependent repositories: 519,899 (may contain duplicates)
- Total versions: 206
- Total maintainers: 2
- Total advisories: 18
gem.coop: loofah
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah also includes some HTML sanitizers based on `html5lib`'s safelist, which are a specific application of the general transformation functionality.
- Homepage: https://github.com/flavorjones/loofah
- Documentation: http://www.rubydoc.info/gems/loofah/
- Licenses: MIT
- Latest release: 2.25.2 (published 29 days ago)
- Last Synced: 2026-08-12T19:33:25.830Z (1 day ago)
- Versions: 65
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 731,255,940 Total
- Docker Downloads: 821,074,725
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 0.009%
- Downloads: 0.028%
- Maintainers (2)
-
Funding:
- https://github.com/sponsors/flavorjones
-
Advisories:
- Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons
- Loofah: SVG `href` attribute bypasses local-reference restriction
- Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references
- Loofah has improper detection of disallowed URIs via `allowed_uri?`
- Improper detection of disallowed URIs by Loofah `allowed_uri?`
- Uncontrolled Recursion in Loofah
- Improper neutralization of data URIs may allow XSS in Loofah
- Inefficient Regular Expression Complexity in Loofah
- Loofah Allows Cross-site Scripting
- Loofah Cross-site Scripting vulnerability
- Cross-site Scripting in loofah
rubygems.org: loofah
Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri. Loofah also includes some HTML sanitizers based on `html5lib`'s safelist, which are a specific application of the general transformation functionality.
- Homepage: https://github.com/flavorjones/loofah
- Documentation: http://www.rubydoc.info/gems/loofah/
- Licenses: MIT
- Latest release: 2.25.2 (published 29 days ago)
- Last Synced: 2026-08-13T04:26:08.846Z (about 16 hours ago)
- Versions: 65
- Dependent Packages: 88
- Dependent Repositories: 519,899
- Downloads: 731,418,378 Total
- Docker Downloads: 821,074,725
-
Rankings:
- Dependent repos count: 0.028%
- Downloads: 0.029%
- Docker downloads count: 0.144%
- Dependent packages count: 0.353%
- Average: 0.79%
- Stargazers count: 1.964%
- Forks count: 2.221%
- Maintainers (2)
-
Funding:
- https://github.com/sponsors/flavorjones
-
Advisories:
- Loofah `allowed_uri?` does not detect `javascript:` URIs split by numeric character references without semicolons
- Loofah: SVG `href` attribute bypasses local-reference restriction
- Loofah `allowed_uri?` does not detect `javascript:` URIs split by named whitespace character references
- Loofah has improper detection of disallowed URIs via `allowed_uri?`
- Improper detection of disallowed URIs by Loofah `allowed_uri?`
- Uncontrolled Recursion in Loofah
- Improper neutralization of data URIs may allow XSS in Loofah
- Inefficient Regular Expression Complexity in Loofah
- Loofah Allows Cross-site Scripting
- Loofah Cross-site Scripting vulnerability
- Cross-site Scripting in loofah
proxy.golang.org: github.com/flavorjones/loofah
- Homepage:
- Documentation: https://pkg.go.dev/github.com/flavorjones/loofah#section-documentation
- Licenses: mit
- Latest release: v2.25.2+incompatible (published 29 days ago)
- Last Synced: 2026-08-12T19:33:26.434Z (1 day ago)
- Versions: 61
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Stargazers count: 2.112%
- Forks count: 2.341%
- Average: 6.208%
- Dependent packages count: 9.576%
- Dependent repos count: 10.802%
gentoo-portage: dev-ruby/loofah
Library for manipulating and transforming HTML/XML documents and fragments
- Homepage: https://github.com/flavorjones/loofah
- Documentation: https://packages.gentoo.org/packages/dev-ruby/loofah
- Licenses: MIT
- Latest release: 2.25.0 (published 3 months ago)
- Last Synced: 2026-07-28T01:17:17.119Z (17 days ago)
- Versions: 3
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
ubuntu-20.04: ruby-loofah
- Homepage: https://github.com/flavorjones/loofah
- Licenses: mit
- Latest release: 2.4.0+dfsg-1 (published 6 months ago)
- Last Synced: 2026-03-13T08:21:59.782Z (5 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
ubuntu-22.04: ruby-loofah
- Homepage: https://github.com/flavorjones/loofah
- Licenses: mit
- Latest release: 2.13.0-2 (published 6 months ago)
- Last Synced: 2026-03-13T13:36:38.930Z (5 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
debian-13: ruby-loofah
- Homepage: https://github.com/flavorjones/loofah
- Documentation: https://packages.debian.org/trixie/ruby-loofah
- Licenses: mit
- Latest release: 2.24.0-1 (published 6 months ago)
- Last Synced: 2026-03-14T18:07:48.813Z (5 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
ubuntu-24.10: ruby-loofah
- Homepage: https://github.com/flavorjones/loofah
- Licenses: mit
- Latest release: 2.22.0-1 (published 6 months ago)
- Last Synced: 2026-03-09T17:07:04.906Z (5 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
debian-11: ruby-loofah
- Homepage: https://github.com/flavorjones/loofah
- Documentation: https://packages.debian.org/bullseye/ruby-loofah
- Licenses: mit
- Latest release: 2.7.0+dfsg-1 (published 6 months ago)
- Last Synced: 2026-03-14T05:21:49.926Z (5 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
debian-12: ruby-loofah
- Homepage: https://github.com/flavorjones/loofah
- Documentation: https://packages.debian.org/bookworm/ruby-loofah
- Licenses: mit
- Latest release: 2.19.1-1 (published 6 months ago)
- Last Synced: 2026-03-13T00:04:40.108Z (5 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
ubuntu-23.10: ruby-loofah
- Homepage: https://github.com/flavorjones/loofah
- Licenses: mit
- Latest release: 2.21.3-1 (published 6 months ago)
- Last Synced: 2026-03-14T01:17:43.246Z (5 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
ubuntu-23.04: ruby-loofah
- Homepage: https://github.com/flavorjones/loofah
- Licenses: mit
- Latest release: 2.19.1-1 (published 6 months ago)
- Last Synced: 2026-03-12T07:03:41.859Z (5 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
debian-10: ruby-loofah
- Homepage: https://github.com/flavorjones/loofah
- Documentation: https://packages.debian.org/buster/ruby-loofah
- Licenses: mit
- Latest release: 2.2.3-1+deb10u1 (published 6 months ago)
- Last Synced: 2026-03-13T17:01:13.802Z (5 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
guix: ruby-loofah
Ruby library for manipulating and transforming HTML/XML
- Homepage: https://github.com/flavorjones/loofah
- Documentation: https://git.savannah.gnu.org/cgit/guix.git/tree/gnu/packages/ruby-xyz.scm#n7737
- Licenses: expat
- Latest release: 2.24.1 (published 5 months ago)
- Last Synced: 2026-04-27T16:20:43.810Z (4 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
pkgsrc-netbsd-x86_64-10.1-all: www/ruby-loofah
HTML sanitizer for Rails applications
- Homepage: https://github.com/flavorjones/loofah
- Documentation: https://pkgsrc.se/www/ruby-loofah
- Licenses: mit
- Latest release: 2.25.0 (published 3 months ago)
- Last Synced: 2026-05-27T10:52:27.012Z (3 months ago)
- Versions: 1
- Dependent Packages: 0
- Dependent Repositories: 0
-
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%
Dependencies
- hoe-markdown ~> 1.3 development
- json ~> 2.2 development
- minitest ~> 5.14 development
- rake ~> 13.0 development
- rdoc >= 4.0, < 7 development
- rr ~> 1.2.0 development
- rubocop ~> 1.1 development
- crass ~> 1.0.2
- nokogiri >= 1.5.9
- actions/checkout v2 composite
- ruby/setup-ruby v1 composite
- rubocop ~> 1.1 development
- rubocop-minitest = 0.29.0 development
- rubocop-packaging = 0.5.2 development
- rubocop-performance = 1.16.0 development
- rubocop-rake = 0.6.0 development
- rubocop-shopify = 2.12.0 development