RepoPilot

headroomlabs-ai / headroom

Search headroomlabs-ai/headroom

GitHub

Repository health

Security, maintenance, dependencies and license for headroomlabs-ai/headroom.

Security

0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low

52 dependencies checked (2 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.

Security checks (RepoPilot estimate) · 6.4/10

OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.

  • Recent activityLast commit 1d ago10/10
  • License filePermissive license: Apache-2.010/10
  • Tests run on pull requestsCI configured + tests present10/10
  • Static analysis on commitsCodeQL action detected in workflows10/10
  • Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
  • Code review before merge16/20 recent PRs had requested reviewers6/10
  • Pinned dependenciesOnly 0/86 actions pinned to SHAs2/10
  • Automated dependency updatesNo Dependabot or Renovate config found0/10
  • Security policyNo SECURITY.md found0/10
  • Branch protectionInsufficient permissions to read branch protectionnot scored

Maintenance

22 Oct 2026
Last commit
active
100+
Commits in the last year
337
Contributors
all time · 13 in the last 91 commits
v0.41.0
Latest release
~6d cadence

Outside contributions: 0 of 84 external pull requests merged (0% of those decided).From the 90 most recently updated pull requests, bots excluded.

Recent releases

  • v0.41.014 Oct 2026 · 9 days after previous
  • v0.40.06 Oct 2026 · 9 days after previous
  • v0.39.126 Sept 2026 · 1 day after previous
  • v0.39.025 Sept 2026 · 4 days after previous
  • v0.38.021 Sept 2026 · 25 days after previous

Pull requests

Open
19
0 stale (60+ days, no update in 30)
Merged
0
of the 30 latest
Median time to merge
Unknown
From bots
1
not listed below

The 30 most recently updated pull requests.

Top contributors

Of the 91 most recent commits.

Issues

Open
594
issues and pull requests, as GitHub counts them
Awaiting first reply
26
of 29 open among the 29 latest
Oldest open
187 days

Most wanted

Rates come from the 29 most recently updated issues; the open count and oldest issue cover the whole repository.

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

52
Packages checked
npm
2
Direct packages checked
listed in the manifest
50
Transitive packages checked
pulled in by other packages
Unknown
External imports
outside packages the code imports

License compatibility

Repo license: Apache-2.0 · 2 deps checked · 0 potential conflicts.

License

Apache-2.0
License
Permissive
Family
0
License conflicts in dependencies
2 dependencies checked
Commercial use: Generally fine for commercial and proprietary use, subject to attribution and notice terms. Apache-2.0 also grants a patent licence.