RepoPilot

launchbadge / sqlx

Search launchbadge/sqlx

GitHub

Repository health

Security, maintenance, dependencies and license for launchbadge/sqlx.

Security

0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low

5 dependencies checked (5 direct), cargo, via deps.dev. Findings apply only to the packages and versions checked.

OpenSSF Scorecard · 4.8/10

Checks sorted from strongest to weakest.

  • Recent activity30 commits and 2 issue activity found in the last 90 days10/10
  • Code review before mergeAll changesets reviewed10/10
  • No risky CI workflowsNo dangerous workflow patterns detected10/10
  • No binaries in the repositoryNo binaries found in the repo10/10
  • License fileLicense file detected10/10
  • Least-privilege CI tokensDetected GitHub workflow tokens with excessive permissions0/10
  • OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
  • Pinned dependenciesDependency not pinned by hash detected0/10
  • Fuzz testingProject is not fuzzed0/10
  • Security policySecurity policy file not detected0/10
  • Branch protectionBranch protection not enabled on development/release branches0/10
  • Static analysis on commitsSAST tool is not run on all commits0/10
  • Published through a build pipelinePackaging workflow not detectednot scored
  • Signed releasesNo releases foundnot scored

Maintenance

21 Oct 2026
Last commit
active
88
Commits in the last year
574
Contributors
all time · 72 in the last 100 commits
None
Latest release
No GitHub releases

Outside contributions: 26 of 98 external pull requests merged (53% of those decided), median 25 days to merge.From the 100 most recently updated pull requests, bots excluded.

Pull requests

Open
16
0 stale (60+ days, no update in 30)
Merged
7
of the 30 latest
Median time to merge
38 days
From bots
0
not listed below

Open

Recently merged

The 30 most recently updated pull requests.

Top contributors

Of the 100 most recent commits.

Issues

Open
785
issues and pull requests, as GitHub counts them
Median time to close
87 days
from 8 closed of the 39 latest
Awaiting first reply
19
of 31 open among the 39 latest
Oldest open
6.8 years

Most wanted

Rates come from the 39 most recently updated issues; the open count and oldest issue cover the whole repository.

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

5
Packages checked
cargo
5
Direct packages checked
listed in the manifest
Unknown
External imports
outside packages the code imports

Packages pulled in by these were not checked.

License compatibility

Repo license: Apache-2.0 · 5 deps checked · 0 potential conflicts.

License

Apache-2.0
License
Permissive
Family
0
License conflicts in dependencies
5 dependencies checked
Commercial use: Generally fine for commercial and proprietary use, subject to attribution and notice terms. Apache-2.0 also grants a patent licence.