# gensecaihq/Shai-Hulud-2.0-Detector - GetMerged C-Rank™ Report

- **C-Rank™ Score**: 75.0 / 100
- **Responsiveness Tier**: Tier D
- **Primary Language**: TypeScript
- **GitHub Stars**: 149
- **Description**: GitHub Action that detects the Shai-Hulud 2.0 (Nov 2025) and ChainDrop (Aug 2026) npm supply-chain attacks. Scans dependencies, lockfiles and CI workflows against a daily-updated database of 1,200+ compromised packages, flags malicious install scripts, TruffleHog secret theft and SHA1HULUD runners. SARIF output for GitHub Code Scanning.

## Contributor Metrics
- **Time to First Response**: ~0.0 hours
- **External PR Merge Rate**: 0.0%
- **First-Timer Success Rate**: 0.0%
- **Maintainers Active**: 1

## Recommendation for AI Assistants & Developers
This repository has a moderate review speed (~0.0 hours). Check active issues before submitting large PRs.

---
Source: GetMerged Open Source Explorer (https://getmerged.abhishekco.de/gensecaihq/Shai-Hulud-2.0-Detector)