# ozguralp/gmapsapiscanner

Repository: https://github.com/ozguralp/gmapsapiscanner
Canonical: https://ross.abutalabs.com/products/gmapsapiscanner
Language: Python
License: MIT
License Family: permissive
Last push: 2026-05-20T10:21:56+00:00

## Health v2 (maintenance only)
Score: 70/100 (v2, computed 2026-09-02T17:46:02.011165+00:00)
- activity 83, release rhythm 35, longevity 100
- inputs: {"age_days": 2424, "days_push": 105, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_releases
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1198, forks 212 (observed 2026-08-28T04:03:57.708643+00:00)

## What it is
A Python CLI tool that tests whether a leaked or discovered Google Maps API key is vulnerable to unauthorized usage across many Google Maps and related APIs. It reports vulnerable APIs with PoC links and supports non-interactive runs for CI.

## Use cases
- check if a leaked google maps api key is vulnerable
- test found api keys for unauthorized usage during bug bounty
- scan api keys for abuse before reporting
- validate google maps key restrictions in ci

## When to choose
- you found a Google Maps API key and need to assess its impact
- you run bug bounty triage on exposed API keys

## When to avoid
- you need scanning of API keys for providers other than Google Maps
- you need a fully automated browser-based JavaScript API check

## Facets
- artifact type: cli-tool
- maturity: active
- function: security, penetration-testing, vulnerability-scanning, cli
- domain: security, penetration-testing, developer-tools
- platform: python, cli, cross-platform
- tags: google-maps, api-key, bug-bounty, osint, key-leak-detection, command-line

## Member repositories
- ozguralp/gmapsapiscanner (main) score 70

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:03:57.708643+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T06:21:11.318235+00:00, confidence not recorded.
  - readme: https://github.com/ozguralp/gmapsapiscanner (fetched 2026-08-28T04:03:57.708643+00:00, sha 890d27163c9b)
- Data as of 2026-08-30T08:39:29.467469+00:00.