ladybirdbrowser / ladybird
Repository health
Security, maintenance, dependencies and license for ladybirdbrowser/ladybird.
Security
Dependencies were not checked for known security issues, because RepoPilot found no dependency manifest it can read. That does not mean they are safe. Inspect its manifests on GitHub ↗
Security checks (RepoPilot estimate) · 4.4/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: BSD-2-Clause10/10
- Tests run on pull requestsCI configured + tests present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesOnly 0/15 actions pinned to SHAs2/10
- Code review before mergeOnly 2/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionDefault branch 'master' has no protection rule0/10
Maintenance
Outside contributions: 8 of 10 external pull requests merged (100% of those decided), median 0 days to merge.From the 100 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 6
- 0 stale (60+ days, no update in 30)
- Merged
- 24
- of the 30 latest
- Median time to merge
- Same day
- From bots
- 0
- not listed below
Open
- #12997 Compositor: Hide overlay scrollbars until they are usedawesomekling · opened today
- #12979 LibGC+LibWeb: Clear weak pointers to dead cells before running finalizersshannonbooth · opened today
- #12998 LibURL+LibWeb: Implement URL, URLSearchParams and Origin in Rustshannonbooth · opened today
- #12961 LibHTTP+LibWeb: Process `Link` headers of document responsestcl3 · opened 1 day ago
- #12993 LibMedia+Compositor: Don't count video frames while not ticking a sinkZaggy1024 · opened today
Recently merged
- #12995 LibTextCodec: Fix encoding bugs and unify decoders and encodersshannonbooth · merged 23 Oct 2026
- #12996 LibWeb+LibSandbox: Fix a style record use-after-free, keep sanitizer stacksawesomekling · merged 23 Oct 2026
- #12994 UI/Qt: Give the web view rounded corners on macOSawesomekling · merged 23 Oct 2026
- #12965 LibWeb: Ignore padding, borders, and backgrounds on native checkboxessideshowbarker · merged 23 Oct 2026
- #12992 Compositor: Make key input from the UI asynchronousawesomekling · merged 23 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- awesomekling49 commits · 49%
- kalenikaliaksandr26 commits · 26%
- shannonbooth16 commits · 16%
- Lubrsi4 commits · 4%
- gmta3 commits · 3%
Of the 100 most recent commits.
Issues
- Open
- 577
- issues and pull requests, as GitHub counts them
- Median time to close
- 101 days
- from 13 closed of the 23 latest
- Awaiting first reply
- 4
- of 10 open among the 23 latest
- Oldest open
- 2.4 years
Most wanted
- #12615 Compile error on latest rust compiler.3 reactions · 2 comments
- #11829 UI/Qt: “Exit fullscreen” popup that appears when you switch Ladybird to full screen and won't go away1 reaction · 1 comment
Rates come from the 23 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.