macrozheng / mall
Repository health
Security, maintenance, dependencies and license for macrozheng/mall.
Security
Dependencies were not checked for known security issues, because RepoPilot found no dependency manifest it can read. That does not mean they are safe. Inspect its manifests on GitHub ↗
OpenSSF Scorecard · 2.0/10
Checks sorted from strongest to weakest.
- No binaries in the repositoryNo binaries found in the repo10/10
- License fileLicense file detected10/10
- Recent activity2 commits and 0 issue activity found in the last 90 days1/10
- Code review before mergeFound 0/30 approved changesets0/10
- Static analysis on commitsNo SAST tool detected0/10
- OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
- Pinned dependenciesDependency not pinned by hash detected0/10
- Security policySecurity policy file not detected0/10
- Fuzz testingProject is not fuzzed0/10
- Branch protectionBranch protection not enabled on development/release branches0/10
- Published through a build pipelinePackaging workflow not detectednot scored
- No risky CI workflowsNo workflows foundnot scored
- Least-privilege CI tokensNo tokens foundnot scored
- Signed releasesNo releases foundnot scored
Maintenance
Outside contributions: 0 of 97 external pull requests merged (0% of those decided).From the 99 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 1
- 0 stale (60+ days, no update in 30)
- Merged
- 0
- of the 30 latest
- Median time to merge
- Unknown
- From bots
- 0
- not listed below
Open
- #1007 Restrict Redis cache deserialization to an allowlist of subtypesHhH666-ux · opened 16 days ago
Recently merged
None from people in recent pull requests.
The 30 most recently updated pull requests.
Top contributors
- macrozheng100 commits · 100%
Of the 100 most recent commits.
Issues
- Open
- 16
- issues and pull requests, as GitHub counts them
- Median time to close
- 9 days
- from 36 closed of the 38 latest
- Awaiting first reply
- 0
- of 2 open among the 38 latest
- Oldest open
- 7.8 years
Most wanted
- #35 English Translation Support13 reactions · 20 comments
Rates come from the 38 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.