keygraphhq / shannon
Repository health
Security, maintenance, dependencies and license for keygraphhq/shannon.
Security
54 dependencies checked (4 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 5.0/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 8d ago10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesAll actions pinned to SHAs10/10
- License fileLicense: AGPL-3.08/10
- Tests run on pull requestsCI configured but no tests found in the complete tree5/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 0 of 38 external pull requests merged (0% of those decided).From the 100 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 11
- 1 stale (60+ days, no update in 30)
- Merged
- 12
- of the 30 latest
- Median time to merge
- Same day
- From bots
- 0
- not listed below
Open
- #499 fix: validate workspace names before building pathsDextheking1 · opened 1 day ago
- #498 fix: only accept http and https target URLsDextheking1 · opened 1 day ago
- #497 fix: enforce 0600 on config.toml rewritesDextheking1 · opened 1 day ago
- #495 Fox lab socivilservices-lgtm · opened 5 days ago
- #492 fix(docker): add AppArmor unconfined and Chromium no-sandbox options (closes #469)Tanmay9223 · opened 9 days ago
Recently merged
- #494 fix(cli): repair `shannon stop` and speed up orphan/empty stops (#493)ezl-keygraph · merged 15 Oct 2026
- #488 Docs/editions naming report linkgeorge-keygraph · merged 8 Oct 2026
- #484 docs: update README cyber verification guidanceezl-keygraph · merged 6 Oct 2026
- #482 fix: increase Capella research timeout to four hoursezl-keygraph · merged 5 Oct 2026
- #481 docs: update OpenAI examples to GPT-6 Solezl-keygraph · merged 5 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- ezl-keygraph65 commits · 65%
- george-keygraph29 commits · 29%
- ajmallesh2 commits · 2%
- keygraphVarun2 commits · 2%
- Varun Sivamani1 commit · 1%
Of the 100 most recent commits.
Issues
- Open
- 30
- issues and pull requests, as GitHub counts them
- Median time to close
- 12 days
- from 34 closed of the 43 latest
- Awaiting first reply
- 7
- of 9 open among the 43 latest
Most wanted
- #479 Docker image keygraph/shannon:3.3.0 has 462 critical / 1179 high CVEs (mostly Chromium 149.0.7827.53)1 reaction · 0 comments
Rates come from the 43 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.