google / python-fire
Repository health
Security, maintenance, dependencies and license for google/python-fire.
Security
1 dependency checked (1 direct), pypi, via deps.dev. Findings apply only to the packages and versions checked.
OpenSSF Scorecard · 3.4/10
Checks sorted from strongest to weakest.
- No risky CI workflowsNo dangerous workflow patterns detected10/10
- No binaries in the repositoryNo binaries found in the repo10/10
- Security policySecurity policy file detected10/10
- License fileLicense file detected9/10
- Recent activity0 commits and 0 issue activity found in the last 90 days0/10
- Code review before mergeFound 1/14 approved changesets0/10
- Least-privilege CI tokensDetected GitHub workflow tokens with excessive permissions0/10
- Pinned dependenciesDependency not pinned by hash detected0/10
- OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
- Fuzz testingProject is not fuzzed0/10
- Branch protectionBranch protection not enabled on development/release branches0/10
- Static analysis on commitsSAST tool is not run on all commits0/10
- Published through a build pipelinePackaging workflow not detectednot scored
- Signed releasesNo releases foundnot scored
Maintenance
Outside contributions: 0 of 56 external pull requests merged (0% of those decided).From the 64 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 21
- 8 stale (60+ days, no update in 30)
- Merged
- 0
- of the 30 latest
- Median time to merge
- Unknown
- From bots
- 4
- not listed below
Open
- #712 Await coroutines from functools.partial componentsrioyu123 · opened 3 days ago
- #710 Parse top-level complex literals consistently with nested valuesAlex0AI · opened 4 days ago
- #706 Avoid an empty first line when wrapping long help itemsGreedyC · opened 11 days ago
- #704 Preserve template arguments that contain unhashable literalscodewithfourtix · opened 11 days ago
- #702 docs: configure Read the Docs using .readthedocs.yamlreginaldalfret · opened 19 days ago
Recently merged
None from people in recent pull requests.
The 30 most recently updated pull requests.
Top contributors
Of the 100 most recent commits.
Issues
- Open
- 196
- issues and pull requests, as GitHub counts them
- Median time to close
- 216 days
- from 12 closed of the 32 latest
- Awaiting first reply
- 3
- of 20 open among the 32 latest
- Oldest open
- 9.5 years
Most wanted
- #188 Option to print help to std out39 reactions · 41 comments
- #384 Allow choices restriction22 reactions · 8 comments
- #76 Use package name when __main__.py is used6 reactions · 2 comments
Rates come from the 32 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
Packages pulled in by these were not checked.