RepoPilot

fuellabs / sway

Search fuellabs/sway

GitHub

Repository health

Security, maintenance, dependencies and license for fuellabs/sway.

Security

0
Critical
0 direct
0
High
0 direct
2
Moderate
0
Low

50 dependencies checked (0 direct), cargo, via deps.dev. Findings apply only to the packages and versions checked.

Security checks (RepoPilot estimate) · 6.0/10

OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.

  • Recent activityLast commit 4d ago10/10
  • License filePermissive license: Apache-2.010/10
  • Tests run on pull requestsCI configured + tests present10/10
  • Security policySECURITY.md present10/10
  • Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
  • Pinned dependenciesOnly 1/113 actions pinned to SHAs2/10
  • Code review before mergeOnly 1/20 recent PRs had requested reviewers2/10
  • Automated dependency updatesNo Dependabot or Renovate config found0/10
  • Static analysis on commitsNo SAST workflow detected0/10
  • Branch protectionInsufficient permissions to read branch protectionnot scored

Maintenance

19 Oct 2026
Last commit
active
100+
Commits in the last year
157
Contributors
all time · 7 in the last 94 commits
v0.72.1
Latest release
~37d cadence

Outside contributions: 22 of 54 external pull requests merged (85% of those decided), median 5 days to merge.From the 96 most recently updated pull requests, bots excluded.

Recent releases

  • v0.72.128 Aug 2026 · 32 days after previous
  • v0.72.027 Jul 2026 · 63 days after previous
  • v0.71.226 May 2026 · same day as previous
  • v0.71.125 May 2026 · 41 days after previous
  • v0.71.014 Apr 2026 · 118 days after previous

Pull requests

Open
19
1 stale (60+ days, no update in 30)
Merged
11
of the 30 latest
Median time to merge
3 days
From bots
1
not listed below

The 30 most recently updated pull requests.

Top contributors

Of the 94 most recent commits.

Issues

Open
956
issues and pull requests, as GitHub counts them
Median time to close
1 day
from 6 closed of the 34 latest
Awaiting first reply
16
of 28 open among the 34 latest
Oldest open
5.6 years

Rates come from the 34 most recently updated issues; the open count and oldest issue cover the whole repository.

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

50
Packages checked
cargo
0
Direct packages checked
listed in the manifest
50
Transitive packages checked
pulled in by other packages
Unknown
External imports
outside packages the code imports

License

Apache-2.0
License
Permissive
Family
Unknown
License conflicts in dependencies
Dependency licenses were not checked
Commercial use: Generally fine for commercial and proprietary use, subject to attribution and notice terms. Apache-2.0 also grants a patent licence.