RepoPilot

mermaid-js / mermaid

Search mermaid-js/mermaid

GitHub

Repository health

Security, maintenance, dependencies and license for mermaid-js/mermaid.

Security

0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low

75 dependencies checked (25 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.

OpenSSF Scorecard · 6.7/10

Checks sorted from strongest to weakest.

  • Recent activity30 commits and 6 issue activity found in the last 90 days10/10
  • Automated dependency updatesUpdate tool detected10/10
  • Code review before mergeAll changesets reviewed10/10
  • No risky CI workflowsNo dangerous workflow patterns detected10/10
  • License fileLicense file detected10/10
  • Static analysis on commitsSAST tool detected10/10
  • Security policySecurity policy file detected10/10
  • Tests run on pull requests9 out of 9 merged PRs checked by a CI test10/10
  • Contributors from several organisationsProject has 10 contributing companies or organizations10/10
  • No binaries in the repositoryBinaries present in source code9/10
  • Pinned dependenciesDependency not pinned by hash detected9/10
  • Branch protectionBranch protection is not maximal on development and all release branches1/10
  • Least-privilege CI tokensDetected GitHub workflow tokens with excessive permissions0/10
  • OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
  • Fuzz testingProject is not fuzzed0/10
  • No known vulnerabilities95 existing vulnerabilities detected0/10
  • Published through a build pipelinePackaging workflow not detectednot scored
  • Signed releasesNo releases foundnot scored

Maintenance

22 Oct 2026
Last commit
active
100+
Commits in the last year
857
Contributors
all time · 9 in the last 93 commits
mermaid@12.2.0
Latest release
~4d cadence

Outside contributions: 1 of 71 external pull requests merged (20% of those decided), median 2.2 days to merge.From the 88 most recently updated pull requests, bots excluded.

Recent releases

Pull requests

Open
29
0 stale (60+ days, no update in 30)
Merged
0
of the 30 latest
Median time to merge
Unknown
From bots
5
not listed below

Open

Recently merged

None from people in recent pull requests.

The 30 most recently updated pull requests.

Top contributors

Of the 93 most recent commits.

Issues

Open
1,948
issues and pull requests, as GitHub counts them
Median time to close
4 days
from 4 closed of the 22 latest
Awaiting first reply
8
of 18 open among the 22 latest
Oldest open
11.9 years

Most wanted

Rates come from the 22 most recently updated issues; the open count and oldest issue cover the whole repository.

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

75
Packages checked
npm
25
Direct packages checked
listed in the manifest
50
Transitive packages checked
pulled in by other packages
Unknown
External imports
outside packages the code imports

License compatibility

Repo license: MIT · 25 deps checked · 0 potential conflicts.

License

MIT
License
Permissive
Family
0
License conflicts in dependencies
25 dependencies checked
Commercial use: Generally fine for commercial and proprietary use, subject to attribution and notice terms.