{"adoption": {"forks": 179, "observed_at": "2026-08-28T04:06:34.635445+00:00", "stars": 2286}, "canonical_url": "https://ross.abutalabs.com/products/apikit", "card": {"archived": false, "artifact_type": "plugin", "description": "APIKit：Discovery, Scan and Audit APIs Toolkit All In One.", "domain": ["security", "apis", "penetration-testing", "developer-tools"], "enriched": true, "function": ["security", "penetration-testing", "vulnerability-scanning", "parser"], "health_score": 26, "homepage": null, "language": "Java", "license": "GPL-3.0", "license_family": "copyleft", "maturity": "active", "member_repos": ["API-Security/APIKit"], "name": "API-Security/APIKit", "platform": ["jvm"], "pushed_at": "2024-04-02T09:29:56+00:00", "repo": "API-Security/APIKit", "stars": 2286, "tags": ["burp-extension", "api-security", "api-discovery", "swagger", "graphql", "openapi", "passive-scanning", "unauthorized-access", "burpsuite"], "topics": ["burp-extensions", "apisec", "api-security", "api-sec"], "urls": [], "use_cases": ["discover leaked swagger or graphql endpoints in burp traffic", "find exposed spring boot actuator endpoints during pentests", "parse api documentation into replayable burp requests", "automate testing for api unauthorized access vulnerabilities", "chain apikit with xray for full api vulnerability scanning", "fingerprint api technologies on arbitrary targets"], "what_it_is": "APIKit is a BurpSuite extension (Java plugin) that discovers, scans, and audits leaked API documentation such as GraphQL, OpenAPI/Swagger, Spring Boot Actuator, SOAP/WSDL, and REST/WADL. It parses discovered API docs into BurpSuite requests for API security testing and can automate unauthorized-access checks.", "when_to_avoid": ["you need a standalone scanner outside BurpSuite", "you lack authorization to test the target", "you need non-Java/Burp environments or CI-based API scanning"], "when_to_choose": ["you already use BurpSuite for web/API penetration testing", "you need passive discovery of API docs from live traffic", "you want to detect exposed actuator, swagger, or WSDL endpoints during authorized assessments"]}, "data_as_of": "2026-08-30T08:39:29.467469+00:00", "members": [{"path": "/products/apikit", "repo": "API-Security/APIKit", "role": "main", "score": 23}], "provenance": {"archived": {"kind": "observed", "observed_at": "2026-08-28T04:06:34.635445+00:00", "source": "github"}, "artifact_type": {"confidence": null, "enriched_at": "2026-08-30T02:40:53.174363+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "982cbc6aaaf6b69b1e596fef508ac29445611ea3035d4f69708b461a0e8dfaab", "fetched_at": "2026-08-28T04:06:34.635445+00:00", "kind": "readme", "missing": false, "url": "https://github.com/API-Security/APIKit"}], "taxonomy_version": 1}, "description": {"kind": "observed", "observed_at": "2026-08-28T04:06:34.635445+00:00", "source": "github"}, "domain": {"confidence": null, "enriched_at": "2026-08-30T02:40:53.174363+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "982cbc6aaaf6b69b1e596fef508ac29445611ea3035d4f69708b461a0e8dfaab", "fetched_at": "2026-08-28T04:06:34.635445+00:00", "kind": "readme", "missing": false, "url": "https://github.com/API-Security/APIKit"}], "taxonomy_version": 1}, "enriched": {"inputs": [], "kind": "computed", "method": "enrichment_status"}, "function": {"confidence": null, "enriched_at": "2026-08-30T02:40:53.174363+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "982cbc6aaaf6b69b1e596fef508ac29445611ea3035d4f69708b461a0e8dfaab", "fetched_at": "2026-08-28T04:06:34.635445+00:00", "kind": "readme", "missing": false, "url": "https://github.com/API-Security/APIKit"}], "taxonomy_version": 1}, "health_score": {"inputs": ["days_since_push", "days_since_release", "archived"], "kind": "computed", "method": "health_v1"}, "homepage": {"kind": "observed", "observed_at": "2026-08-28T04:06:34.635445+00:00", "source": "github"}, "language": {"kind": "observed", "observed_at": "2026-08-28T04:06:34.635445+00:00", "source": "github"}, "license": {"kind": "observed", "observed_at": "2026-08-28T04:06:34.635445+00:00", "source": "github"}, "license_family": {"inputs": ["license"], "kind": "computed", "method": "license_family"}, "maturity": {"confidence": null, "enriched_at": "2026-08-30T02:40:53.174363+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "982cbc6aaaf6b69b1e596fef508ac29445611ea3035d4f69708b461a0e8dfaab", "fetched_at": "2026-08-28T04:06:34.635445+00:00", "kind": "readme", "missing": false, "url": "https://github.com/API-Security/APIKit"}], "taxonomy_version": 1}, "member_repos": {"kind": "observed", "observed_at": "2026-08-28T04:06:34.635445+00:00", "source": "github"}, "name": {"kind": "observed", "observed_at": "2026-08-28T04:06:34.635445+00:00", "source": "github"}, "platform": {"confidence": null, "enriched_at": "2026-08-30T02:40:53.174363+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "982cbc6aaaf6b69b1e596fef508ac29445611ea3035d4f69708b461a0e8dfaab", "fetched_at": "2026-08-28T04:06:34.635445+00:00", "kind": "readme", "missing": false, "url": "https://github.com/API-Security/APIKit"}], "taxonomy_version": 1}, "pushed_at": {"kind": "observed", "observed_at": "2026-08-28T04:06:34.635445+00:00", "source": "github"}, "repo": {"kind": "observed", "observed_at": "2026-08-28T04:06:34.635445+00:00", "source": "github"}, "stars": {"kind": "observed", "observed_at": "2026-08-28T04:06:34.635445+00:00", "source": "github"}, "tags": {"confidence": null, "enriched_at": "2026-08-30T02:40:53.174363+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "982cbc6aaaf6b69b1e596fef508ac29445611ea3035d4f69708b461a0e8dfaab", "fetched_at": "2026-08-28T04:06:34.635445+00:00", "kind": "readme", "missing": false, "url": "https://github.com/API-Security/APIKit"}], "taxonomy_version": 1}, "topics": {"kind": "observed", "observed_at": "2026-08-28T04:06:34.635445+00:00", "source": "github"}, "urls": {"kind": "observed", "observed_at": "2026-08-28T04:06:34.635445+00:00", "source": "github"}, "use_cases": {"confidence": null, "enriched_at": "2026-08-30T02:40:53.174363+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "982cbc6aaaf6b69b1e596fef508ac29445611ea3035d4f69708b461a0e8dfaab", "fetched_at": "2026-08-28T04:06:34.635445+00:00", "kind": "readme", "missing": false, "url": "https://github.com/API-Security/APIKit"}], "taxonomy_version": 1}, "what_it_is": {"confidence": null, "enriched_at": "2026-08-30T02:40:53.174363+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "982cbc6aaaf6b69b1e596fef508ac29445611ea3035d4f69708b461a0e8dfaab", "fetched_at": "2026-08-28T04:06:34.635445+00:00", "kind": "readme", "missing": false, "url": "https://github.com/API-Security/APIKit"}], "taxonomy_version": 1}, "when_to_avoid": {"confidence": null, "enriched_at": "2026-08-30T02:40:53.174363+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "982cbc6aaaf6b69b1e596fef508ac29445611ea3035d4f69708b461a0e8dfaab", "fetched_at": "2026-08-28T04:06:34.635445+00:00", "kind": "readme", "missing": false, "url": "https://github.com/API-Security/APIKit"}], "taxonomy_version": 1}, "when_to_choose": {"confidence": null, "enriched_at": "2026-08-30T02:40:53.174363+00:00", "kind": "inferred", "prompt_version": 1, "sources": [{"content_hash": "982cbc6aaaf6b69b1e596fef508ac29445611ea3035d4f69708b461a0e8dfaab", "fetched_at": "2026-08-28T04:06:34.635445+00:00", "kind": "readme", "missing": false, "url": "https://github.com/API-Security/APIKit"}], "taxonomy_version": 1}}, "score": {"components": {"activity": 0, "longevity": 100, "rhythm": 8}, "computed_at": "2026-09-02T17:46:02.011165+00:00", "flags": [], "formula": "round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)", "inputs": {"age_days": 1743, "days_push": 883, "days_rel": null, "gap_med": null, "n_releases_24m": 0}, "score": 23, "version": 2}, "staleness": {"enrichment_outdated": false, "low_confidence": false, "scrape_days": 9, "stale_scrape": false}}