RepoPilot

golang / go

Search golang/go

GitHub

Repository health

Security, maintenance, dependencies and license for golang/go.

Security

0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low

1 dependency checked (1 direct), go, via deps.dev. Findings apply only to the packages and versions checked.

OpenSSF Scorecard · 6.2/10

Checks sorted from strongest to weakest.

  • Recent activity30 commits and 16 issue activity found in the last 90 days10/10
  • Security policySecurity policy file detected10/10
  • Code review before mergeAll changesets reviewed10/10
  • License fileLicense file detected10/10
  • Fuzz testingProject is fuzzed10/10
  • Pinned dependenciesDependency not pinned by hash detected4/10
  • OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
  • Static analysis on commitsNo SAST tool detected0/10
  • No binaries in the repositoryBinaries present in source code0/10
  • Published through a build pipelinePackaging workflow not detectednot scored
  • No risky CI workflowsNo workflows foundnot scored
  • Least-privilege CI tokensNo tokens foundnot scored
  • Signed releasesNo releases foundnot scored
  • Branch protectionScorecard could not run this check.not scored

GitHub Code Scanning: no alerts.

Maintenance

20 Oct 2026
Last commit
active
99
Commits in the last year
40
Contributors
in the last 100 commits
None
Latest release
No GitHub releases

Outside contributions: 0 of 99 external pull requests merged (0% of those decided).From the 100 most recently updated pull requests, bots excluded.

Pull requests

Open
17
0 stale (60+ days, no update in 30)
Merged
0
of the 30 latest
Median time to merge
Unknown
From bots
0
not listed below

Recently merged

None from people in recent pull requests.

The 30 most recently updated pull requests.

Top contributors

Of the 100 most recent commits.

Issues

Open
10,365
on the repository
Median time to close
Same day
from 7 closed of the 99 latest
Awaiting first reply
14
of 92 open among the 99 latest
Oldest open
16.9 years

Most wanted

Rates come from the 99 most recently updated issues; the open count and oldest issue cover the whole repository.

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

1
Packages checked
go
1
Direct packages checked
listed in the manifest
1583
External imports
outside packages the code imports

Packages pulled in by these were not checked.

License

BSD-3-Clause
License
Permissive
Family
Unknown
License conflicts in dependencies
Dependency licenses were not checked
Commercial use: Generally fine for commercial and proprietary use, subject to attribution and notice terms.