coder / code-server
Repository health
Security, maintenance, dependencies and license for coder/code-server.
Security
75 dependencies checked (25 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 9.1/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: MIT10/10
- Tests run on pull requestsCI configured + tests present10/10
- Automated dependency updatesDependabot configured10/10
- Security policySECURITY.md present10/10
- Static analysis on commitsCodeQL action detected in workflows10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesAll actions pinned to SHAs10/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 17 of 30 external pull requests merged (74% of those decided), median 1.1 days to merge.From the 56 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 11
- 0 stale (60+ days, no update in 30)
- Merged
- 15
- of the 30 latest
- Median time to merge
- 6 days
- From bots
- 15
- not listed below
Open
- #8066 Bump Node to 24.22.1mkulina · opened 1 day ago
- #8067 Update Code to 1.143.0cdrci · opened today
- #8059 Fix origin check with default ports and X-Forwarded-Portharshbhx · opened 7 days ago
- #8061 fix: forward OSC 52 copies to the browser clipboardyasir-erkam · opened 6 days ago
- #8047 feat: keep Copilot BYOK agent turns alive in server Agent Hostkhanhkit · opened 15 days ago
Recently merged
- #8055 Expand ~ in path options from the config fileharshbhx · merged 14 Oct 2026
- #8053 Fix false booleans in config file being parsed as trueharshbhx · merged 14 Oct 2026
- #8050 feat(i18n): add Turkish login localeKeuqS · merged 9 Oct 2026
- #8045 Update Helm chart and changelog with 4.141.0cdrci · merged 8 Oct 2026
- #8040 Update Code to 1.141.0cdrci · merged 8 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- cdrci23 commits · 40%
- code-asher13 commits · 22%
- denusklo7 commits · 12%
- harshbhx2 commits · 3%
- KeuqS1 commit · 2%
Of the 58 most recent commits.
Issues
- Open
- 156
- issues and pull requests, as GitHub counts them
- Median time to close
- 5 days
- from 17 closed of the 31 latest
- Awaiting first reply
- 0
- of 14 open among the 31 latest
- Oldest open
- 7.6 years
Most wanted
- #7948 Feature request: make chat sessions server-side so they follow the user across browsers, and let them be archived2 reactions · 1 comment
- #7703 code-server always asks to trust workspace even if it is already trusted2 reactions · 1 comment
- #7938 Terminal loses text selection whenever a TUI enables mouse reporting — no way to opt out in the browser2 reactions · 3 comments
Rates come from the 31 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: MIT · 24 deps checked · 0 potential conflicts.