Repo brief: tsenart/vegeta

Generated by RepoPilot · document generated 2026-09-16 · concise human review Evidence snapshot · analyzed 2026-09-16T12:37:13.066Z · commit cf5811269046

Verdict

Mixed — Slowing — last commit 7mo ago

• Last commit 7mo ago
• 32+ active contributors
• MIT licensed
• CI configured
• 1 more receipt on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against dependency CVEs from deps.dev and OpenSSF Scorecard

What it is

Vegeta is a command-line HTTP load testing tool and reusable Go library that generates sustained request traffic at a specified rate to benchmark and stress-test HTTP services. It addresses the Coordinated Omission problem common in load generators by maintaining accurate timing metrics, and provides extensive reporting via CLI pipelines, plots, and Prometheus integration. Dual-mode architecture: core load-testing logic in lib/ (attack.go, metrics.go, reporters.go) serves both the CLI and as an importable library; internal/cmd/ contains CLI entry points (vegeta binary implied); lib/plot/, lib/prom/ provide reporting backends; lib/target.schema.json and targets.go handle request…

Start here

Open these first:

• lib/attack.go — Core attack execution engine that implements the load testing request dispatch and timing logic.
• lib/metrics.go — Metrics aggregation and statistical analysis for load test results (latency, throughput, percentiles).
• lib/results.go — Result data structure and serialization layer for attack outcomes and result streaming.
• lib/pacer.go — Pacing strategy implementations that control request rate and timing to avoid Coordinated Omission.
• main.go — CLI entry point and command routing for attack, report, dump, plot, and encode subcommands.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/tsenart/vegeta
cd vegeta
make vegeta
mv vegeta ~/bin

The Makefile target 'vegeta' is the primary build command; verify Go 1.22+ is installed per go.mod. Pre-compiled releases are also available at https://github.com/tsenart/vegeta/releases.

Daily commands:

CLI usage (from README): vegeta [global flags] <command> [command flags]. Example workflow: echo 'GET http://example.com' | vegeta attack -duration=30s -rate=100 | vegeta report. The tool is pipeline-oriented; indiv…

…shortened for this brief.

Key cautions & unknowns

• Slowing — last commit 7mo ago
• Concentrated ownership — top contributor handles 50% of recent commits
• Scorecard: marked unmaintained (0/10)
• Versioning confusion: CLI and library use separate SemVer tracks (cli/vX.Y.Z vs lib/vX.Y.Z or vX.Y.Z tags post-v8.0.0); be careful not to mix incompatible versions. Platform-specific code: attack_nonwindows.go…
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests
• OpenSSF Scorecard

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.