RepoPilot

automatic1111 / stable-diffusion-webui

Search automatic1111/stable-diffusion-webui

GitHub

Repository health

Security, maintenance, dependencies and license for automatic1111/stable-diffusion-webui.

Security

0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low

1 dependency checked (1 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.

Security checks (RepoPilot estimate) · 4.2/10

OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.

  • Tests run on pull requestsCI configured + tests present10/10
  • Code review before merge17/20 recent PRs had requested reviewers10/10
  • License fileLicense: AGPL-3.08/10
  • Least-privilege CI tokensWorkflows do not declare explicit permissions (uses default)5/10
  • Recent activityLast commit 235d ago — slowing3/10
  • Pinned dependenciesOnly 0/9 actions pinned to SHAs2/10
  • Automated dependency updatesNo Dependabot or Renovate config found0/10
  • Security policyNo SECURITY.md found0/10
  • Static analysis on commitsNo SAST workflow detected0/10
  • Branch protectionInsufficient permissions to read branch protectionnot scored

Maintenance

2 Mar 2026
Last commit
stale
0
Commits in the last year
639
Contributors
all time · 11 in the last 100 commits
v1.10.1
Latest release
~47d cadence

Outside contributions: 5 of 93 external pull requests merged (8% of those decided), median 2.5 days to merge.From the 100 most recently updated pull requests, bots excluded.

Recent releases

  • v1.10.19 Feb 2025 · 197 days after previous
  • v1.10.027 Jul 2024 · 21 days after previous
  • v1.10.0-RC6 Jul 2024 · 39 days after previous
  • v1.9.428 May 2024 · 36 days after previous
  • v1.9.322 Apr 2024 · 9 days after previous

Pull requests

Open
12
8 stale (60+ days, no update in 30)
Merged
3
of the 30 latest
Median time to merge
Same day
From bots
0
not listed below

Recently merged

The 30 most recently updated pull requests.

Top contributors

Of the 100 most recent commits.

Issues

Open
2,512
issues and pull requests, as GitHub counts them
Median time to close
9 days
from 15 closed of the 60 latest
Awaiting first reply
14
of 45 open among the 60 latest
Oldest open
4.1 years

Most wanted

Rates come from the 60 most recently updated issues; the open count and oldest issue cover the whole repository.

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

1
Packages checked
npm
1
Direct packages checked
listed in the manifest
Unknown
External imports
outside packages the code imports

Packages pulled in by these were not checked.

License

AGPL-3.0
License
Strong copyleft (network)
Family
Unknown
License conflicts in dependencies
Dependency licenses were not checked
Commercial use: AGPL extends copyleft to network/hosted use — shipping it in a SaaS can require releasing your source. Review carefully before commercial use.