RepoPilot

bigskysoftware / htmx

Search bigskysoftware/htmx

GitHub

Repository health

Security, maintenance, dependencies and license for bigskysoftware/htmx.

Security

0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low

66 dependencies checked (16 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.

OpenSSF Scorecard · 5.2/10

Checks sorted from strongest to weakest.

  • Recent activity30 commits and 13 issue activity found in the last 90 days10/10
  • No risky CI workflowsNo dangerous workflow patterns detected10/10
  • Security policySecurity policy file detected10/10
  • No binaries in the repositoryNo binaries found in the repo10/10
  • License fileLicense file detected9/10
  • Code review before mergeFound 15/30 approved changesets5/10
  • Pinned dependenciesDependency not pinned by hash detected3/10
  • Least-privilege CI tokensDetected GitHub workflow tokens with excessive permissions0/10
  • OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
  • Fuzz testingProject is not fuzzed0/10
  • Signed releasesProject has not signed or included provenance with any releases.0/10
  • Static analysis on commitsSAST tool is not run on all commits0/10
  • Published through a build pipelinePackaging workflow not detectednot scored
  • Branch protectionScorecard could not run this check.not scored

Maintenance

22 Oct 2026
Last commit
active
100+
Commits in the last year
471
Contributors
all time · 26 in the last 96 commits
v4.0.0
Latest release
~47d cadence

Outside contributions: 11 of 65 external pull requests merged (41% of those decided), median 4.9 days to merge.From the 94 most recently updated pull requests, bots excluded.

Recent releases

Pull requests

Open
16
0 stale (60+ days, no update in 30)
Merged
12
of the 30 latest
Median time to merge
21 days
From bots
1
not listed below

Open

Recently merged

The 30 most recently updated pull requests.

Top contributors

Of the 96 most recent commits.

Issues

Open
304
issues and pull requests, as GitHub counts them
Median time to close
13 days
from 16 closed of the 45 latest
Awaiting first reply
10
of 29 open among the 45 latest
Oldest open
4.8 years

Most wanted

Rates come from the 45 most recently updated issues; the open count and oldest issue cover the whole repository.

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

66
Packages checked
npm
16
Direct packages checked
listed in the manifest
50
Transitive packages checked
pulled in by other packages
Unknown
External imports
outside packages the code imports

License

Unknown
License
Unknown / unlicensed
Family
Unknown
License conflicts in dependencies
Dependency licenses were not checked
Commercial use: No clear license detected. With no license, default copyright applies — treat as all-rights-reserved until you confirm terms with the maintainer.