koala73 / worldmonitor
Repository health
Security, maintenance, dependencies and license for koala73/worldmonitor.
Security
75 dependencies checked (25 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
- GHSA-vfj7-8cjw-p6xm · braces (direct)braces vulnerable to stack-exhaustion denial of service through deeply nested patternsAsk about this findingMODERATE
Security checks (RepoPilot estimate) · 6.0/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- Tests run on pull requestsCI configured + tests present10/10
- Static analysis on commitsCodeQL action detected in workflows10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesAll actions pinned to SHAs10/10
- License fileLicense: AGPL-3.08/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Branch protectionDefault branch 'main' has no protection rule0/10
GitHub Code Scanning: no alerts.
Maintenance
Outside contributions: 3 of 11 external pull requests merged (75% of those decided), median 0.7 days to merge.From the 96 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 4
- 0 stale (60+ days, no update in 30)
- Merged
- 26
- of the 30 latest
- Median time to merge
- Same day
- From bots
- 1
- not listed below
Open
- #9565 fix(country-brief): keep ?country in the URL while a deep-linked brief loadskoala73 · opened today
- #9568 test(chokepoints): pin the clock in the two live-tool tests that reject 38koala73 · opened today
- #9567 feat(mcp): support protocol 2025-11-25, the last handshake revisionkoala73 · opened today
- #9543 feat: add Keenable Search to MCP Quick Connectilya-bogin-keenable · opened 1 day ago
Recently merged
- #9566 feat(mcp): record the requested MCP-Protocol-Version on usage eventskoala73 · merged 23 Oct 2026
- #9563 fix(mcp): negotiate initialize from the body when the header names a newer protocol versionkoala73 · merged 23 Oct 2026
- #9564 fix(docs): permanent /docs redirect, translated zh titles, restored source-attribution headerkoala73 · merged 23 Oct 2026
- #9562 perf(corpus): cache git lastmod lookups in the crawlable corpus buildkoala73 · merged 23 Oct 2026
- #9561 perf(forecast): reuse the resolver's verdict-only calibration shadowkoala73 · merged 23 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- koala7392 commits · 97%
- ayobamiseun2 commits · 2%
- kiaramaldonado1 commit · 1%
Of the 95 most recent commits.
Issues
- Open
- 345
- issues and pull requests, as GitHub counts them
- Median time to close
- 3 days
- from 6 closed of the 13 latest
- Awaiting first reply
- 4
- of 7 open among the 13 latest
- Oldest open
- 236 days
Rates come from the 13 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.