mattpocock / skills
Repository health
Security advisories, maintenance activity, dependencies and license for mattpocock/skills, with what was checked and what was not.
Security
52 dependencies checked (2 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
- GHSA-vfj7-8cjw-p6xm · bracesbraces vulnerable to stack-exhaustion denial of service through deeply nested patternsAsk about this findingMODERATE
OpenSSF Scorecard · 3.9/10
Checks sorted from strongest to weakest.
- MaintainedLast commit 0d ago10/10
- LicensePermissive license: MIT10/10
- Token-PermissionsWorkflows declare explicit, scoped permissions10/10
- CI-TestsCI configured but no tests found in the complete tree5/10
- Pinned-DependenciesOnly 0/4 actions pinned to SHAs2/10
- Code-ReviewOnly 0/20 recent PRs had requested reviewers2/10
- Dependency-Update-ToolNo Dependabot or Renovate config found0/10
- Security-PolicyNo SECURITY.md found0/10
- SASTNo SAST workflow detected0/10
- Branch-ProtectionDefault branch 'main' has no protection rule0/10
Maintenance
Outside contributions: 0 of 5 external pull requests merged (0% of those decided).From the 93 most recently updated pull requests, bots excluded.
Commit activity
100 commits sampledClick a bar to browse commits — or open GitHub for the full month ↓
Work rhythm
Commits by day of week
Pull request health
How fast do PRs resolve?
Days from open to merged / closed, last 17 PRs.
Pending right now13 open PRs
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?v=4)
Recently merged16 PRs in the recent window
Issue triage — last 12 weeks
Blue bars = issues opened that week, green = closed. Healthy projects keep these roughly in balance — a persistently bigger blue bar means an opening backlog. open issues on GitHub ↗
Release cadence· median 1d between releases
Latest v1.3.1 shipped 10d ago · typical gap 1d · shipping faster than before · 9 releases sampled.
New faces — last 90 days2 contributors appearing for the first time in this window
Heuristic: contributors whose earliest commit in the recent sample is < 90 days old AND who have ≤ 3 commits in the window. Click a name for their commits in this repo.
Top contributors
Issue health
Computed from GitHub Issues — no estimates. Per-issue rates use the 94 most-recently-updated issues (recent, not all-time); the open total and oldest-open age are repo-wide.
Total open on the repo (authoritative).
From 11 recently-closed issues. p90 11d.
Age of the longest-open unresolved issue.
38 of 83 recent open issues have no comments yet.
0 of 83 recent open issues had no update in 30d+.
40 of 83 recent open issues are unlabeled.
What the backlog is about
AI-generatedOpen issues grouped into themes by an LLM from their titles — a summary, not an authoritative classification. Numbers reflect the 40 most-recently-active open issues.
Most-wanted
Open issues with the most positive reactions — what the community is asking for.
/implement has no completion step, finished tickets are never marked done
#508 · opened 3mo ago · @HorvathAlteisen
Unable to install plugin using either Windows command line or Claude Code command line
#715 · opened 2mo ago · @suhaas
new install instructions not working for claude
#692 · opened 2mo ago · @codymikol
`/implement` does not update ticket status or leave session context on completion
#990 · opened 1mo ago · @shaffaf997
Implement skill doesn't update completion status of planned tickets
#1099 · opened 23d ago · @AkikoJ
Most-discussed
Open issues with the most comments — where the conversation is.
/implement has no completion step, finished tickets are never marked done
#508 · opened 3mo ago · @HorvathAlteisen
Wayfinder tasks can bypass the implementation workflow
#931 · opened 1mo ago · @luxi78
new install instructions not working for claude
#692 · opened 2mo ago · @codymikol
grill-with-docs on gpt-6-Astra
#1098 · opened 23d ago · @paolomojica
wizard: write_env never assigns the shell variable, so later stages read ${KEY:-default} as the default
#1041 · opened 1mo ago · @digitalcostas
Labels in the recent sample
Per-issue rates are computed from a sample of 94 most-recently-updated issues, so they describe recent behavior rather than the all-time backlog. Reaction and comment counts come straight from GitHub.
Dependencies
Checked packages and import counts
Checked counts describe advisory coverage, not the repository’s complete dependency inventory. External imports come from a separate source-code graph.