alibaba / open-code-review
Repository health
Security, maintenance, dependencies and license for alibaba/open-code-review.
Security
50 dependencies checked (0 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 5.8/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 2d ago10/10
- License filePermissive license: Apache-2.010/10
- Tests run on pull requestsCI configured + tests present10/10
- Static analysis on commitsCodeQL action detected in workflows10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependencies15/16 actions pinned to SHAs6/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Branch protectionDefault branch 'main' has no protection rule0/10
Maintenance
Outside contributions: 16 of 99 external pull requests merged (70% of those decided), median 6 days to merge.From the 99 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 29
- 0 stale (60+ days, no update in 30)
- Merged
- 0
- of the 30 latest
- Median time to merge
- Unknown
- From bots
- 0
- not listed below
Open
- #1820 fix: prevent postinstall 404 crash for unreleased v0.0.0titouhalloub · opened today
- #1819 fix: prevent postinstall 404 crash for unreleased v0.0.0titouhalloub · opened today
- #1769 feat(session): mirror review sessions to S3-compatible object storageSU-AN-coder · opened 6 days ago
- #1810 fix(agent): key deleted files by their real path, not the /dev/null sentinelOUAO-FRANK · opened 2 days ago
- #1818 Add empty line for improved readability in ocr.jstitouhalloub · opened today
Recently merged
None from people in recent pull requests.
The 30 most recently updated pull requests.
Top contributors
- lizhengfeng10116 commits · 16%
- Qiyuanqiii9 commits · 9%
- wu21-web7 commits · 7%
- jimpablo7 commits · 7%
- basil-k-aji-dev6 commits · 6%
Of the 100 most recent commits.
Issues
- Open
- 345
- issues and pull requests, as GitHub counts them
- Median time to close
- 31 days
- from 7 closed of the 23 latest
- Awaiting first reply
- 7
- of 16 open among the 23 latest
- Oldest open
- 140 days
Most wanted
- #1020 Wanted: Who is using Open Code Review? Please leave a comment!4 reactions · 16 comments
Rates come from the 23 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.