RepoPilot

agalwood / motrix

Search agalwood/motrix

GitHub

Repository health

Security, maintenance, dependencies and license for agalwood/motrix.

Security

0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low

75 dependencies checked (25 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.

Security checks (RepoPilot estimate) · 5.2/10

OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.

  • Recent activityLast commit 0d ago10/10
  • License filePermissive license: MIT10/10
  • Tests run on pull requestsCI configured + tests present10/10
  • Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
  • Pinned dependenciesAll actions pinned to SHAs10/10
  • Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
  • Automated dependency updatesNo Dependabot or Renovate config found0/10
  • Security policyNo SECURITY.md found0/10
  • Static analysis on commitsNo SAST workflow detected0/10
  • Branch protectionDefault branch 'main' has no protection rule0/10

Maintenance

24 Oct 2026
Last commit
active
100+
Commits in the last year
83
Contributors
all time · 6 in the last 100 commits
v2.0.0
Latest release
~3d cadence

Outside contributions: 6 of 13 external pull requests merged (75% of those decided), median 1 day to merge.From the 97 most recently updated pull requests, bots excluded.

Recent releases

Pull requests

Open
1
0 stale (60+ days, no update in 30)
Merged
28
of the 30 latest
Median time to merge
Same day
From bots
0
not listed below

Open

Recently merged

The 30 most recently updated pull requests.

Top contributors

Of the 100 most recent commits.

Issues

Open
156
issues and pull requests, as GitHub counts them
Median time to close
1 day
from 21 closed of the 34 latest
Awaiting first reply
4
of 13 open among the 34 latest
Oldest open
7.8 years

Most wanted

Rates come from the 34 most recently updated issues; the open count and oldest issue cover the whole repository.

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

75
Packages checked
npm
25
Direct packages checked
listed in the manifest
50
Transitive packages checked
pulled in by other packages
1498
External imports
outside packages the code imports

License compatibility

Repo license: MIT · 25 deps checked · 1 potential conflict.

  • elkjsEPL-2.0 OR GPL-3.0-or-later

License

MIT
License
Permissive
Family
1
License conflicts in dependencies
25 dependencies checked
Commercial use: Generally fine for commercial and proprietary use, subject to attribution and notice terms.

Dependency license conflicts

Dependencies whose license may be incompatible with MIT — worth a closer look before shipping.

  • elkjsEPL-2.0 OR GPL-3.0-or-later