RepoPilot

urbanadventurer/WhatWeb

Next generation web scanner

Mixed

Mixed signals — read the receipts

ConcernsDependency

copyleft license (GPL-2.0) — review compatibility; test evidence incomplete…

HealthyFork & modify

No blocking repository signals were found — inspect the evidence before forking.

HealthyLearn from

Documented and popular — useful reference codebase to read through.

MixedDeploy as-is

dependency CVE scan unavailable

  • Concentrated ownership — top contributor handles 69% of recent commits
  • GPL-2.0 is copyleft — check downstream compatibility
  • Last commit 5w ago
  • 11 active contributors
  • GPL-2.0 licensed
  • CI configured

What would improve this?

  • Use as dependency Concerns to Mixed if: relicense under MIT/Apache-2.0 (rare for established libs)

Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests

Informational only. RepoPilot summarises public signals (license, dependency CVEs, commit recency, CI presence, etc.) at the time of analysis. Signals can be incomplete or stale. Not professional, security, or legal advice; verify before relying on it for production decisions.

Repository brief

Repo brief: urbanadventurer/WhatWeb

Generated by RepoPilot · document generated 2026-09-16 · concise human review Evidence snapshot · analyzed 2026-09-16T11:12:56.127Z · commit d279d93042d0

Verdict

Mixed — Mixed signals — read the receipts

  • Last commit 5w ago
  • 11 active contributors
  • GPL-2.0 licensed
  • CI configured

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests

What it is

WhatWeb is a Ruby-based web technology identification scanner that recognizes 1800+ web technologies including CMSs, frameworks, JavaScript libraries, web servers, and embedded devices by analyzing HTTP responses and page content. It answers 'What is that website?' by detecting CMS platforms (WordPress, Drupal), analytics packages, version numbers, email addresses, SQL errors, and other indicators through both passive (single HTTP request) and aggressive scanning modes. Monolithic Ruby application: lib/whatweb.rb is the main module; lib/whatweb/ contains core subsystems (scan.rb handles scanning logic, parser.rb processes responses, redirect.rb tracks redirects, banner.rb generates…

Start here

Open these first:

  • lib/whatweb.rb — Main entry point and orchestrator—initializes the scanner, manages plugins, and coordinates the scanning workflow.
  • lib/whatweb/scan.rb — Core scanning logic that executes HTTP requests, applies plugins, and aggregates results for each target.
  • lib/plugins.rb — Plugin loading, registration, and execution framework—every custom detection depends on understanding this loader.
  • lib/plugin_support.rb — Plugin API and helper methods that define the contract between core scanner and individual detection plugins.
  • lib/target.rb — Target abstraction representing a single URL to scan—manages normalization and state throughout the scan lifecycle.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/urbanadventurer/WhatWeb.git
cd WhatWeb
bundle install  # uses Gemfile for dependencies
make install    # or follow INSTALL.md
./whatweb http://example.com

Daily commands:

# CLI usage (primary interface)
./whatweb [options] <URL>

# With Makefile
make          # likely builds/compiles
make test     # if test target exists

# As library
require_relative 'lib/whatweb'
WhatWeb.scan('http://example.com')

Key cautions & unknowns

  • Concentrated ownership — top contributor handles 69% of recent commits
  • GPL-2.0 is copyleft — check downstream compatibility
    1. Plugin loading order matters: Plugins in lib/plugins.rb are loaded in filesystem order; plugin dependencies (if any) are not explicitly declared. 2. HTTP client state persistence: lib/target.rb maintains…
  • Published-advisory coverage was unavailable for the captured dependencies.
  • Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.


For the complete agent context, use the CLAUDE.md or Cursor rules export.

Save as

Full context for agent files, or a concise PDF for human review.

View complete agent reference

Open to load every section of the agent reference.

Want this for your own repo?

Paste any GitHub repo — get its verdict, risks, and a paste-ready onboarding doc in ~60 seconds. Free, no sign-up.

Embed the "Forkable" badge

Paste into your README — live-updates from the latest cached analysis.

Variant:
RepoPilot: Forkable
[![RepoPilot: Forkable](https://repopilot.app/api/badge/urbanadventurer/whatweb?axis=fork)](https://repopilot.app/r/urbanadventurer/whatweb)

Paste at the top of your README.md — renders inline like a shields.io badge.

Preview social card

This card auto-renders when someone shares https://repopilot.app/r/urbanadventurer/whatweb on X, Slack, or LinkedIn.

Ask AI about urbanadventurer/whatweb

Grounded in the actual source code. Pick a starter question or write your own.

Or write your own question
Embed this chat in your README

Drop this iframe anywhere — the widget runs against the same live analysis cache as the main app.

<iframe
  src="https://repopilot.app/embed/urbanadventurer/whatweb"
  width="100%" height="500"
  style="border:1px solid #d0d7de; border-radius:8px;"
  allow="microphone"
  loading="lazy"
></iframe>