justjavac / wechat-miniapp-radar
Repository health
Security, maintenance, dependencies and license for justjavac/wechat-miniapp-radar.
Security
71 dependencies checked (21 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 4.1/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 22d ago10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- License fileLicense: GPL-3.08/10
- Tests run on pull requestsCI configured but no tests found in the complete tree5/10
- Pinned dependenciesOnly 0/12 actions pinned to SHAs2/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 44 of 50 external pull requests merged (88% of those decided), median 0 days to merge.From the 100 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 0
- 0 stale (60+ days, no update in 30)
- Merged
- 27
- of the 30 latest
- Median time to merge
- Same day
- From bots
- 0
- not listed below
Open
None from people in recent pull requests.
Recently merged
- #394 fix: upgrade nanoid to patched version (CVE-2026-67213)anupamme · merged 2 Oct 2026
- #393 fix: clear resources cache on load failurejustjavac · merged 29 Sept 2026
- #392 revert: drop ineffective edge cache rule for dynamic API routesjustjavac · merged 29 Sept 2026
- #391 perf: cache resource APIs at the edge via vercel.json headersjustjavac · merged 29 Sept 2026
- #390 perf & ci: cache resource reads, add snapshot drift checks, and CDN cache headersjustjavac · merged 29 Sept 2026
The 30 most recently updated pull requests.
Top contributors
- justjavac95 commits · 95%
- anupamme3 commits · 3%
- sonofmagic1 commit · 1%
- orbisai0security1 commit · 1%
Of the 100 most recent commits.
Issues
- Open
- 0
- issues and pull requests, as GitHub counts them
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.