acmesh-official / acme.sh
Repository health
Security, maintenance, dependencies and license for acmesh-official/acme.sh.
Security
Dependencies were not checked for known security issues, because RepoPilot found no dependency manifest it can read. That does not mean they are safe. Inspect its manifests on GitHub ↗
OpenSSF Scorecard · 5.0/10
Checks sorted from strongest to weakest.
- Recent activity30 commits and 7 issue activity found in the last 90 days10/10
- No binaries in the repositoryNo binaries found in the repo10/10
- No risky CI workflowsNo dangerous workflow patterns detected10/10
- License fileLicense file detected10/10
- Published through a build pipelinePackaging workflow detected10/10
- Code review before mergeFound 15/18 approved changesets8/10
- Least-privilege CI tokensDetected GitHub workflow tokens with excessive permissions0/10
- OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
- Fuzz testingProject is not fuzzed0/10
- Security policySecurity policy file not detected0/10
- Branch protectionBranch protection not enabled on development/release branches0/10
- Pinned dependenciesDependency not pinned by hash detected0/10
- Static analysis on commitsSAST tool is not run on all commits0/10
- Signed releasesNo releases foundnot scored
Maintenance
Outside contributions: 51 of 89 external pull requests merged (75% of those decided), median 4.9 days to merge.From the 100 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 6
- 0 stale (60+ days, no update in 30)
- Merged
- 20
- of the 30 latest
- Median time to merge
- 3 days
- From bots
- 0
- not listed below
Open
- #7346 Let --install-cert update the pre/post/renew hooksAdzerKI · opened 3 days ago
- #7355 dns_simply: use Bearer auth for the Simply.com APItomsommer · opened 1 day ago
- #7349 Add DNS Validation for hosttechndu2 · opened 3 days ago
- #6209 Add Support for hosttech.ch/hosttech.eubaerengraben · opened 1.7 years ago
- #7308 Allow configurable curl binary in acme.shkrikk · opened 15 days ago
Recently merged
- #7341 deploy/ssh: support pfx deploymentinvario · merged 23 Oct 2026
- #7343 Add DNS API for ConnByteSteffenBarthel · merged 22 Oct 2026
- #6789 Fix dns_arvan zone lookup, TXT cleanup and HTTP errorsabooraja · merged 22 Oct 2026
- #7339 Add deploy hook for pfSense (pfREST)handfrog · merged 22 Oct 2026
- #7344 dns_namecheap: let NAMECHEAP_* env vars override saved credentialszorbathut · merged 21 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- neilpang60 commits · 60%
- kekropp4 commits · 4%
- mashirozx2 commits · 2%
- Pablo12 commits · 2%
- philhagen1 commit · 1%
Of the 100 most recent commits.
Issues
- Open
- 96
- issues and pull requests, as GitHub counts them
- Median time to close
- 1 day
- from 51 closed of the 57 latest
- Awaiting first reply
- 0
- of 6 open among the 57 latest
- Oldest open
- 7.4 years
Rates come from the 57 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.