jgm / pandoc
Repository health
Security, maintenance, dependencies and license for jgm/pandoc.
Security
Dependencies were not checked for known security issues, because RepoPilot found no dependency manifest it can read. That does not mean they are safe. Inspect its manifests on GitHub ↗
OpenSSF Scorecard · 5.6/10
Checks sorted from strongest to weakest.
- Recent activity30 commits and 16 issue activity found in the last 90 days10/10
- No risky CI workflowsNo dangerous workflow patterns detected10/10
- Security policySecurity policy file detected10/10
- Least-privilege CI tokensGitHub workflow tokens follow principle of least privilege10/10
- No binaries in the repositoryNo binaries found in the repo10/10
- License fileLicense file detected10/10
- Fuzz testingProject is fuzzed10/10
- Code review before mergeFound 0/30 approved changesets0/10
- Static analysis on commitsNo SAST tool detected0/10
- OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
- Pinned dependenciesDependency not pinned by hash detected0/10
- Branch protectionBranch protection not enabled on development/release branches0/10
- Signed releasesProject has not signed or included provenance with any releases.0/10
- Published through a build pipelinePackaging workflow not detectednot scored
Maintenance
23 Oct 2026
Last commit
active
100+
Commits in the last year
662
Contributors
all time · 6 in the last 100 commits
3.12.1
Latest release
~34d cadence
Outside contributions: 4 of 85 external pull requests merged (40% of those decided), median 2 days to merge.From the 100 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 28
- 0 stale (60+ days, no update in 30)
- Merged
- 1
- of the 30 latest
- Median time to merge
- 16 days
- From bots
- 0
- not listed below
Open
- #11997 Docx reader: keep grid columns that have no width.patrick-5546 · opened today
- #11996 Docx reader: fix namespaces in notes and comments.patrick-5546 · opened today
- #11995 Docx reader: read all underline types.patrick-5546 · opened today
- #11986 Markdown writer: keep emphasis delimiters flankingaslakhellesoy · opened 2 days ago
- #2342 Ikiwiki wikilinkscsrhodes · opened 11.2 years ago
Recently merged
- #11946 Docx reader: read w:fldSimple fields.aslakhellesoy · merged 23 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- jgm92 commits · 92%
- aslakhellesoy3 commits · 3%
- sghng2 commits · 2%
- jadhavgaurav1 commit · 1%
- arybczak1 commit · 1%
Of the 100 most recent commits.
Issues
- Open
- 1,051
- issues and pull requests, as GitHub counts them
- Oldest open
- 15.4 years
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
Not checked
Packages checked
Unknown
External imports
outside packages the code imports
License
GPL-2.0
License
Copyleft
Family
Unknown
License conflicts in dependencies
Dependency licenses were not checked
Commercial use: GPL requires derivative works to also be GPL — a significant constraint for closed-source products. Review before commercial use.