OrganizationAssetnote
@assetnote • Open source projects from assetnote. Use this route to separate flagship concentration from portfolio breadth before you treat a publisher as broadly strong.
Portfolio concentration
87%
Top three share
Shows whether the organization is driven by one breakout repo or several visible projects.
Breadth
23 repos
Visible snapshot
6 repositories updated in the last 90 days.
Leading language
Go
Portfolio mix
Go (9), Unknown (7), Python (4)
Average size
207
Stars per repository
Useful for distinguishing one flagship-heavy publisher from a repeatable portfolio.
Updated: 2026-10-25(1d ago)GitHub API fallback23 repositories
87%
of the visible star count comes from this organization's top three repositories.
207
stars per repository in this same snapshot.
Go
is the most common language here, with 6 repositories updated in the last 90 days.
Why this rank
This organization stands out because one flagship repo drives 52% of its visible star count.
Flagship share 52%Breakout repo: react2shell-scanner
Organization pages work best when you separate portfolio breadth from flagship concentration. In Assetnote's case, the visible top three repositories account for about 87% of total stars in this snapshot, which helps explain whether the organization is known for one breakout project or for a broader repeatable portfolio.
The dominant language mix here is Go (9), Unknown (7), Python (4). That makes this page useful not just for popularity checks, but also for seeing what technical shape an organization's public ecosystem actually has.
Top Repositories
| # | Repository | Language | Stars |
|---|---|---|---|
| 1 | assetnote/react2shell-scanner High Fidelity Detection Mechanism for RSC/Next.js RCE (CVE-2025-55182 & CVE-2025-66478) | Python | 2.5K |
| 2 | assetnote/php2shell-scanner High fidelity scanner for php2shell (CVE-2026-109618 and CVE-2026-109619) | Python | 931 |
| 3 | assetnote/surf Escalate your SSRF vulnerabilities on Modern Cloud Environments. `surf` allows you to filter a list of hosts, returning a list of viable SSRF candidates. | Go | 761 |
| 4 | assetnote/ghostbuster Eliminate dangling elastic IPs by performing analysis on your resources within all your AWS accounts. | Python | 279 |
| 5 | assetnote/h3fuzz Content discovery and fuzzing with HTTP/3 support (100k requests per second) | Go | 132 |
| 6 | assetnote/hyoketsu | Go | 114 |
| 7 | assetnote/node2shell-scanner High fidelity detection mechanism for node2shell (CVE-2026-111497) | Python | 70 |
| 8 | assetnote/rod A Chrome DevTools Protocol driver for web automation and scraping. | Go | 6 |
| 9 | assetnote/pgx PostgreSQL driver and toolkit for Go | 2 | |
| 10 | assetnote/squirrel Fluent SQL generation for golang | Go | 2 |
| 11 | assetnote/cimg-postgres | Dockerfile | 1 |
| 12 | assetnote/uptime-kuma A fancy self-hosted monitoring tool | 1 | |
| 13 | assetnote/cloudflare-go Go library for the Cloudflare v4 API | Go | 1 |
| 14 | assetnote/docker-pgbouncer Minimal PgBouncer image that is easy to configure | Shell | 1 |
| 15 | assetnote/assetnote-mcp-server-public-docs Public documentation for the Assetnote MCP server | 0 | |
| 16 | assetnote/masscan TCP port scanner, spews SYN packets asynchronously, scanning entire Internet in under 5 minutes. | C | 0 |
| 17 | assetnote/teleport The easiest, and most secure way to access and protect all of your infrastructure. | 0 | |
| 18 | assetnote/pgconn | Go | 0 |
| 19 | assetnote/celery-exporter A Prometheus exporter for Celery metrics | 0 | |
| 20 | assetnote/zgrab2 Fast Go Application Scanner | 0 | |
| 21 | assetnote/crypto [mirror] Go supplementary cryptography libraries | Go | 0 |
| 22 | assetnote/pg-repack-docker Docker image for 'pg_repack' (PostgreSQL extension) to use 'client-side' to run/invoke the actual repack functionality for a PostgreSQL database with the extension installed. | 0 | |
| 23 | assetnote/go-logkeycheck Ensure zap log field names are consistent | Go | 0 |
Next step after the organization read
Open a flagship repository, compare a couple of portfolio leaders, or return to the organization map when you want a broader concentration read.
Learn and methodology
Keep trust-building context reachable, but behind the first data read instead of ahead of it.
How to read this organization snapshot
Total stars are useful as a discovery signal, but they do not tell you whether a team maintains every repository equally. Pair this page with release cadence, maintainer activity, and the flagship concentration shown above before making adoption decisions.
For broader background on GitStar's ranking logic and editorial guidance, see Methodology & Editorial Standards.