bytedance / deer-flow
Repository health
Security, maintenance, dependencies and license for bytedance/deer-flow.
Security
75 dependencies checked (25 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 5.8/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: MIT10/10
- Tests run on pull requestsCI configured + tests present10/10
- Security policySECURITY.md present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependencies17/34 actions pinned to SHAs6/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionDefault branch 'main' has no protection rule0/10
GitHub Code Scanning: no alerts.
Maintenance
Outside contributions: 29 of 98 external pull requests merged (81% of those decided), median 0.7 days to merge.From the 100 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 27
- 0 stale (60+ days, no update in 30)
- Merged
- 2
- of the 30 latest
- Median time to merge
- 3 days
- From bots
- 0
- not listed below
Open
- #7328 fix(ci): retarget label docs at triage.yml and guard that applied labels are declaredSmilewithoutfalling · opened today
- #7310 fix(skills): preserve export outcomes when archive cleanup failsMcgAtom · opened today
- #7294 feat(runtime): honor the web UI language in replies and DeerMem updatesjianyx1 · opened 1 day ago
- #7335 fix(threads): keep the submitted user message visible through the optimistic handoffLuckVd · opened today
- #7334 fix(agents): keep durable context from invalidating the prompt prefix cachehe-yufeng · opened today
Recently merged
- #7175 fix(frontend): classify thinking-only token steps correctlyTYY-2005 · merged 23 Oct 2026
- #7327 docs: trim startup guidance below lint size limitWillemJiang · merged 23 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- WillemJiang8 commits · 8%
- hyeonsang0107167 commits · 7%
- Totoro-qaq4 commits · 4%
- Aling334 commits · 4%
- dakjdakd4 commits · 4%
Of the 95 most recent commits.
Issues
- Open
- 968
- issues and pull requests, as GitHub counts them
- Median time to close
- 14 days
- from 6 closed of the 21 latest
- Awaiting first reply
- 12
- of 15 open among the 21 latest
- Oldest open
- 1.4 years
Rates come from the 21 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: MIT · 25 deps checked · 0 potential conflicts.