RepoPilot

javen205 / ijpay

Search javen205/ijpay

GitHub

Repository health

Security advisories, maintenance activity, dependencies and license for javen205/ijpay, with what was checked and what was not.

Security

Dependency advisories were not checked: no supported dependency manifest was captured. This does not mean the project has no vulnerable dependencies. Inspect its manifests on GitHub ↗

OpenSSF Scorecard · 2.8/10

Checks sorted from strongest to weakest.

  • LicensePermissive license: Apache-2.010/10
  • CI-TestsCI configured + tests present10/10
  • Code-ReviewOnly 0/17 recent PRs had requested reviewers2/10
  • MaintainedStale — last commit 551d ago0/10
  • Dependency-Update-ToolNo Dependabot or Renovate config found0/10
  • Security-PolicyNo SECURITY.md found0/10
  • SASTNo SAST workflow detected0/10
  • Branch-ProtectionDefault branch 'dev' has no protection rule0/10
  • Token-PermissionsNo workflows to inspectnot scored
  • Pinned-DependenciesNo workflows to inspectnot scored

Maintenance

10 Apr 2025
Last commit
stale
100
Commits / year
11
Contributors
recent window
v2.8.4
Latest release
~141d cadence

Outside contributions: 5 of 19 external pull requests merged (29% of those decided), median 3.4 days to merge.From the 19 most recently updated pull requests, bots excluded.

Recent releases

  • v2.8.418 Sept 2022 · 839 days after previous
  • v2.6.21 Jun 2020 · 176 days after previous
  • v2.4.08 Dec 2019 · 51 days after previous
  • 2.3.018 Oct 2019 · 27 days after previous
  • v2.2.121 Sept 2019 · 48 days after previous
  • v2.1.24 Aug 2019 · 7 days after previous

Commit activity

100 commits sampled
Oct
Jan '23
Apr
Jul
Oct
Jan '24
Apr
Jul
Oct
Jan '25
Apr

Click a bar to browse commits — or open GitHub for the full month ↓

Work rhythm

Commits by day of week

Pull request health

Resolution rate0%
Median time to merge/close: 3.3d · last 17 PRs

How fast do PRs resolve?

< 1d
7
1–3d
0
4–7d
4
1–4w
0
> 1mo
6

Days from open to merged / closed, last 17 PRs.

Pending right now2 open PRs

⚠ 2 stale PRs — open more than 60 days, no update in 30+

Long-running PRs without recent activity are usually maintainer-bandwidth signals — review process bottleneck, orphaned branches, or quietly abandoned work.

Recently merged5 PRs in the recent window

Release cadence· median 48d between releases

Gone quiet

Latest v2.8.4 shipped 1488d ago · typical gap 48d · shipping slower than before · 10 releases sampled.

all releases on GitHub ↗

Top contributors

Issue health

Computed from GitHub Issues — no estimates. Per-issue rates use the 70 most-recently-updated issues (recent, not all-time); the open total and oldest-open age are repo-wide.

Open issues16

Total open on the repo (authoritative).

Median time to close19d

From 56 recently-closed issues. p90 11mo.

Oldest open issue5.3y

Age of the longest-open unresolved issue.

Awaiting first reply86%

12 of 14 recent open issues have no comments yet.

Stale backlog100%

14 of 14 recent open issues had no update in 30d+.

Triage gap100%

14 of 14 recent open issues are unlabeled.

What the backlog is about

AI-generated

Open issues grouped into themes by an LLM from their titles — a summary, not an authoritative classification. Numbers reflect the 14 most-recently-active open issues.

Most-wanted

Open issues with the most positive reactions — what the community is asking for.

Most-discussed

Open issues with the most comments — where the conversation is.

Per-issue rates are computed from a sample of 70 most-recently-updated issues, so they describe recent behavior rather than the all-time backlog. Reaction and comment counts come straight from GitHub.

Dependencies

Checked packages and import counts

Checked counts describe advisory coverage, not the repository’s complete dependency inventory. External imports come from a separate source-code graph.

0
Packages checked
0
Direct packages checked
checked count, not total dependencies
0
Transitive packages checked
checked count, not total dependencies
Unknown
External imports
distinct modules in the captured graph

License

Apache-2.0
License
Permissive
Family
Unknown
Dep conflicts
No dependency license scan coverage
Commercial use: Generally fine for commercial and proprietary use, subject to attribution and notice terms. Apache-2.0 also grants a patent licence.