diesel-rs / diesel
Repository health
Security, maintenance, dependencies and license for diesel-rs/diesel.
Security
0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low
50 dependencies checked (0 direct), cargo, via deps.dev. Findings apply only to the packages and versions checked.
OpenSSF Scorecard · 6.8/10
Checks sorted from strongest to weakest.
- Security policySecurity policy file detected10/10
- Recent activity30 commits and 19 issue activity found in the last 90 days10/10
- No risky CI workflowsNo dangerous workflow patterns detected10/10
- No binaries in the repositoryNo binaries found in the repo10/10
- License fileLicense file detected10/10
- Fuzz testingProject is fuzzed10/10
- Code review before mergeFound 8/9 approved changesets8/10
- Pinned dependenciesDependency not pinned by hash detected8/10
- Branch protectionBranch protection is not maximal on development and all release branches8/10
- Static analysis on commitsSAST tool is not run on all commits2/10
- Least-privilege CI tokensDetected GitHub workflow tokens with excessive permissions0/10
- OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
- Signed releasesProject has not signed or included provenance with any releases.0/10
- Published through a build pipelinePackaging workflow not detectednot scored
Maintenance
22 Oct 2026
Last commit
active
100+
Commits in the last year
499
Contributors
all time · 4 in the last 100 commits
v2.3.14
Latest release
~32d cadence
Outside contributions: 20 of 40 external pull requests merged (80% of those decided), median 3 days to merge.From the 100 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 13
- 0 stale (60+ days, no update in 30)
- Merged
- 15
- of the 30 latest
- Median time to merge
- 3 days
- From bots
- 0
- not listed below
Open
- #5309 Add secret-aware SQLite executionLucaCappelletti94 · opened 2 days ago
- #5312 add support for uuid in mariadbjraffeiner · opened 1 day ago
- #5307 feat: Add `CompositeType` trait and `composite_type!` macrospencewenski · opened 5 days ago
- #5228 add nonnegative wrapper for mysql and mariadbjraffeiner · opened 34 days ago
- #5311 fix(cli): do not prepend schema name to sql_name when table schema is explicitwebdevsamran · opened 2 days ago
Recently merged
- #5308 Return SQL errors from diesel_manage_updated_at instead of panickingLucaCappelletti94 · merged 20 Oct 2026
- #5190 Document skip_insertion for the Insertable deriveMora140 · merged 19 Oct 2026
- #5302 Use `MariadbConnection::version` for existing version checksLucaCappelletti94 · merged 19 Oct 2026
- #5301 Use `PgConnection::version` for existing version checksLucaCappelletti94 · merged 19 Oct 2026
- #5300 Use `SqliteConnection::version` for existing version checksLucaCappelletti94 · merged 19 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- weiznich53 commits · 53%
- LucaCappelletti9427 commits · 27%
- Elrendio18 commits · 18%
- SickleFire2 commits · 2%
Of the 100 most recent commits.
Issues
- Open
- 172
- issues and pull requests, as GitHub counts them
- Median time to close
- 197 days
- from 2 closed of the 16 latest
- Awaiting first reply
- 2
- of 14 open among the 16 latest
- Oldest open
- 10.9 years
Rates come from the 16 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
50
Packages checked
cargo
0
Direct packages checked
listed in the manifest
50
Transitive packages checked
pulled in by other packages
Unknown
External imports
outside packages the code imports
License
Apache-2.0
License
Permissive
Family
Unknown
License conflicts in dependencies
Dependency licenses were not checked
Commercial use: Generally fine for commercial and proprietary use, subject to attribution and notice terms. Apache-2.0 also grants a patent licence.