jesseduffield / lazydocker
Repository health
Security, maintenance, dependencies and license for jesseduffield/lazydocker.
Security
1 dependency checked (1 direct), pypi, via deps.dev. Findings apply only to the packages and versions checked.
OpenSSF Scorecard · 3.2/10
Checks sorted from strongest to weakest.
- No risky CI workflowsNo dangerous workflow patterns detected10/10
- No binaries in the repositoryNo binaries found in the repo10/10
- License fileLicense file detected10/10
- Published through a build pipelinePackaging workflow detected10/10
- Code review before mergeFound 3/10 approved changesets3/10
- Recent activity0 commits and 0 issue activity found in the last 90 days0/10
- Least-privilege CI tokensDetected GitHub workflow tokens with excessive permissions0/10
- OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
- Security policySecurity policy file not detected0/10
- Fuzz testingProject is not fuzzed0/10
- Pinned dependenciesDependency not pinned by hash detected0/10
- Branch protectionBranch protection not enabled on development/release branches0/10
- Signed releasesProject has not signed or included provenance with any releases.0/10
- Static analysis on commitsSAST tool is not run on all commits0/10
Maintenance
Outside contributions: 4 of 93 external pull requests merged (15% of those decided), median 3 days to merge.From the 97 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 26
- 17 stale (60+ days, no update in 30)
- Merged
- 0
- of the 30 latest
- Median time to merge
- Unknown
- From bots
- 0
- not listed below
Open
- #647 Add .deb package release configurationPolpOnline · opened 1.5 years ago
- #853 Fix CPU and memory percentages to match docker statsbrito219 · opened 3 days ago
- #852 docs: add Simplified Chinese README translation (README_zh.md)WanderLandWalker · opened 5 days ago
- #851 Add logs.pipeThrough option to pipe container logs through a commandtbtonner · opened 8 days ago
- #850 fix: release ContainerMutex before blocking container-inspect I/O (prevents POTENTIAL DEADLOCK hang)shivampwm2020 · opened 10 days ago
Recently merged
None from people in recent pull requests.
The 30 most recently updated pull requests.
Top contributors
- jesseduffield61 commits · 63%
- thaJeztah19 commits · 20%
- peauc3 commits · 3%
- A11Might2 commits · 2%
- scottmckendry2 commits · 2%
Of the 97 most recent commits.
Issues
- Open
- 308
- issues and pull requests, as GitHub counts them
- Median time to close
- 51 days
- from 5 closed of the 47 latest
- Awaiting first reply
- 11
- of 42 open among the 47 latest
- Oldest open
- 7.3 years
Most wanted
- #4 Add podman support?116 reactions · 38 comments
- #167 Select and copy text in logs25 reactions · 11 comments
- #423 Add docker-compose profile support23 reactions · 8 comments
Rates come from the 47 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
Packages pulled in by these were not checked.
License compatibility
Repo license: MIT · 1 deps checked · 1 potential conflict.
- codespellGPL-2.0-only
License
Dependency license conflicts
Dependencies whose license may be incompatible with MIT — worth a closer look before shipping.
- codespellGPL-2.0-only