gorhill / ublock
Repository health
Security, maintenance, dependencies and license for gorhill/ublock.
Security
0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low
56 dependencies checked (6 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 5.0/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 1d ago10/10
- Tests run on pull requestsCI configured + tests present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- License fileLicense: GPL-3.08/10
- Pinned dependenciesOnly 0/1 actions pinned to SHAs2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
- Code review before mergeCould not fetch PRsnot scored
Maintenance
21 Oct 2026
Last commit
active
100+
Commits in the last year
128
Contributors
all time · 1 in the last 100 commits
1.75.1b16
Latest release
~18d cadence
Top contributors
- gorhill100 commits · 100%
Of the 100 most recent commits.
Issues
- Open
- 15
- issues and pull requests, as GitHub counts them
- Median time to close
- Same day
- from 95 closed of the 100 latest
- Awaiting first reply
- 0
- of 5 open among the 100 latest
- Oldest open
- 11.2 years
Most wanted
- #3726 New issue tracker is at https://github.com/uBlockOrigin/uBlock-issues/issues109 reactions · 5 comments
- #3178 RFE: way to disable blocking temporarily (one page load or limited time)10 reactions · 10 comments
- #3604 Block sending Referrer information4 reactions · 4 comments
Rates come from the 100 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
56
Packages checked
npm
6
Direct packages checked
listed in the manifest
50
Transitive packages checked
pulled in by other packages
Unknown
External imports
outside packages the code imports
License
GPL-3.0
License
Copyleft
Family
Unknown
License conflicts in dependencies
Dependency licenses were not checked
Commercial use: GPL requires derivative works to also be GPL — a significant constraint for closed-source products. Review before commercial use.