microsoft / terminal
Repository health
Security, maintenance, dependencies and license for microsoft/terminal.
Security
Dependencies were not checked for known security issues, because RepoPilot found no dependency manifest it can read. That does not mean they are safe. Inspect its manifests on GitHub ↗
OpenSSF Scorecard · 6.7/10
Checks sorted from strongest to weakest.
- Recent activity30 commits and 17 issue activity found in the last 90 days10/10
- Code review before mergeAll changesets reviewed10/10
- No risky CI workflowsNo dangerous workflow patterns detected10/10
- Security policySecurity policy file detected10/10
- Pinned dependenciesAll dependencies are pinned10/10
- License fileLicense file detected10/10
- Fuzz testingProject is fuzzed10/10
- Static analysis on commitsSAST tool is run on all commits10/10
- Branch protectionBranch protection is not maximal on development and all release branches8/10
- Least-privilege CI tokensDetected GitHub workflow tokens with excessive permissions0/10
- OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
- No binaries in the repositoryBinaries present in source code0/10
- Signed releasesProject has not signed or included provenance with any releases.0/10
- Published through a build pipelinePackaging workflow not detectednot scored
Maintenance
Outside contributions: 15 of 59 external pull requests merged (38% of those decided), median 10.1 days to merge.From the 100 most recently updated pull requests, bots excluded.
Recent releases
- v1.26.2734.02 Oct 2026 · same day as previous
- v1.25.2733.02 Oct 2026 · same day as previous
- v1.24.12741.02 Oct 2026 · 78 days after previous
- v1.25.1912.016 Jul 2026 · same day as previous
- v1.24.11911.016 Jul 2026 · 64 days after previous
Pull requests
- Open
- 14
- 0 stale (60+ days, no update in 30)
- Merged
- 10
- of the 30 latest
- Median time to merge
- 4 days
- From bots
- 0
- not listed below
Open
- #20430 schema: Allow verbose no-argument actions in the settings schemaWeichenleeeee123 · opened 98 days ago
- #20461 Implement `wtcli`, an application to query details about an existing Terminal instancePankajBhojwani · opened 92 days ago
- #20816 Add Turkish (tr-TR) localizationenixyazilim · opened 5 days ago
- #20810 Don't clobber NewTerminalArgs settings when initializing a tabzadjii-msft · opened 6 days ago
- #20831 fix(cascadia): fix zh-CN translation error in TerminalSettingsEditorzincentimeter · opened 2 days ago
Recently merged
- #20835 ci: run the Any CPU, WPF, ConPTY and MSIX bundle builds in CIDHowett · merged 22 Oct 2026
- #20812 Rewrite HwndTerminal to build on ControlInteractivity and -CoreDHowett · merged 20 Oct 2026
- #20394 add setting to disable drag/dropdovholuknf · merged 19 Oct 2026
- #20822 build: move code format to a GH workflow, emit rich errorsDHowett · merged 19 Oct 2026
- #20821 build: move the code format leg to VS 2026DHowett · merged 19 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- DHowett34 commits · 34%
- lhecker15 commits · 15%
- carlos-zamora9 commits · 9%
- consvc5 commits · 5%
- PankajBhojwani4 commits · 4%
Of the 100 most recent commits.
Issues
- Open
- 1,781
- issues and pull requests, as GitHub counts them
- Median time to close
- 6 days
- from 17 closed of the 69 latest
- Awaiting first reply
- 6
- of 52 open among the 69 latest
- Oldest open
- 8.7 years
Most wanted
- #1379 Add support for turning off cursor blink220 reactions · 69 comments
- #2933 Add support for roaming settings.json or storing it elsewhere165 reactions · 56 comments
- #8914 Profile reordering for Settings UI165 reactions · 52 comments
Rates come from the 69 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.