RepoPilot

fastapi / typer

Search fastapi/typer

GitHub

Repository health

Security, maintenance, dependencies and license for fastapi/typer.

Security

0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low

5 dependencies checked (5 direct), pypi, via deps.dev. Findings apply only to the packages and versions checked.

Security checks (RepoPilot estimate) · 6.2/10

OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.

  • Recent activityLast commit 2d ago10/10
  • License filePermissive license: MIT10/10
  • Tests run on pull requestsCI configured + tests present10/10
  • Automated dependency updatesDependabot configured10/10
  • Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
  • Pinned dependenciesAll actions pinned to SHAs10/10
  • Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
  • Security policyNo SECURITY.md found0/10
  • Static analysis on commitsNo SAST workflow detected0/10
  • Branch protectionDefault branch 'master' has no protection rule0/10

Maintenance

15 Oct 2026
Last commit
active
100+
Commits in the last year
8
Contributors
in the last 77 commits
0.27.3
Latest release
~15d cadence

Outside contributions: 3 of 49 external pull requests merged (11% of those decided), median 6.5 days to merge.From the 78 most recently updated pull requests, bots excluded.

Recent releases

  • 0.27.36 Oct 2026 · 39 days after previous
  • 0.27.228 Aug 2026 · 25 days after previous
  • 0.27.13 Aug 2026 · 19 days after previous
  • 0.27.015 Jul 2026 · 19 days after previous
  • 0.26.826 Jun 2026 · 23 days after previous

Pull requests

Open
12
3 stale (60+ days, no update in 30)
Merged
13
of the 30 latest
Median time to merge
5 days
From bots
9
not listed below

The 30 most recently updated pull requests.

Top contributors

Of the 77 most recent commits.

Issues

Open
46
issues and pull requests, as GitHub counts them

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

5
Packages checked
pypi
5
Direct packages checked
listed in the manifest
Unknown
External imports
outside packages the code imports

Packages pulled in by these were not checked.

License

MIT
License
Permissive
Family
Unknown
License conflicts in dependencies
Dependency licenses were not checked
Commercial use: Generally fine for commercial and proprietary use, subject to attribution and notice terms.