anthropics / claude-code
Repository health
Security, maintenance, dependencies and license for anthropics/claude-code.
Security
Dependencies were not checked for known security issues, because RepoPilot found no dependency manifest it can read. That does not mean they are safe. Inspect its manifests on GitHub ↗
Security checks (RepoPilot estimate) · 5.5/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 1d ago10/10
- Tests run on pull requestsCI configured + tests present10/10
- Security policySECURITY.md present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesOnly 4/12 actions pinned to SHAs2/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- License fileLicense could not be verifiednot scored
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 37 of 93 external pull requests merged (49% of those decided), median 0.4 days to merge.From the 98 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 8
- 0 stale (60+ days, no update in 30)
- Merged
- 6
- of the 30 latest
- Median time to merge
- 1 day
- From bots
- 1
- not listed below
Open
- #21459 feat(hookify): add glob_match support and case sensitivity controltianrking · opened 267 days ago
- #94847 diff: the first edit opens the pane only when it has a file to listbcherny · opened 36 days ago
- #89404 validate-agent.sh: don't abort at the first warning (set -e + ((x++))) and stop false-flagging valid agentsbcherny · opened 59 days ago
- #66416 fix(plugin-dev): validator scripts abort on first finding due to `set -e`wellkilo · opened 136 days ago
- #79150 docs: align code-review README with the current validation-based commandCodeturion · opened 95 days ago
Recently merged
- #100293 Add a HIPAA settings example to examples/settings (settings-hipaa.json, managed-mcp-hipaa.json, README-hipaa.md)sarahdeaton · merged 9 Oct 2026
- #98374 diff: the pane reads the diff again after a rebase that finishedpoteat · merged 30 Sept 2026
- #95423 diff: a shell command the tool held read-only fetches nothingpoteat · merged 24 Sept 2026
- #95587 diff: a resumed session with edits opens the pane, /clear leaves it up, and the session line follows the engine's startpoteat · merged 20 Sept 2026
- #95198 mods/diff: type openPane's answer as unknown so a richer $.ui.open result compilespoteat · merged 18 Sept 2026
The 30 most recently updated pull requests.
Top contributors
- actions-user53 commits · 53%
- poteat32 commits · 32%
- claude7 commits · 7%
- sarahdeaton3 commits · 3%
- 74872 commits · 2%
Of the 100 most recent commits.
Issues
- Open
- 15,467
- issues and pull requests, as GitHub counts them
- Median time to close
- 79 days
- from 2 closed of the 93 latest
- Awaiting first reply
- 42
- of 91 open among the 93 latest
- Oldest open
- 1.6 years
Most wanted
- #85891 [BUG] Claude Desktop (Windows 11): main window stays always-on-top of other applications, with no setting to disable it291 reactions · 123 comments
- #65833 v2.1.150: scroll wheel no longer scrolls conversation — sends arrow keys instead123 reactions · 49 comments
- #79305 Desktop app: support custom themes / accent colors (parity with CLI custom theme system)70 reactions · 22 comments
Rates come from the 93 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.