morluto / rea
Repository health
Security, maintenance, dependencies and license for morluto/rea.
Security
75 dependencies checked (25 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
OpenSSF Scorecard · 5.2/10
Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: MIT10/10
- Tests run on pull requestsCI configured + tests present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesAll actions pinned to SHAs10/10
- Code review before mergeOnly 1/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionDefault branch 'main' has no protection rule0/10
Maintenance
Outside contributions: 3 of 96 external pull requests merged (23% of those decided), median 0.8 days to merge.From the 99 most recently updated pull requests, bots excluded.
Recent releases
- rea-agents-6.7.018 Oct 2026 · same day as previous
- rea-agents-6.6.018 Oct 2026 · 4 days after previous
- rea-agents-6.5.014 Oct 2026 · 3 days after previous
- rea-agents-6.4.011 Oct 2026 · 1 day after previous
- rea-agents-6.3.09 Oct 2026 · same day as previous
Pull requests
- Open
- 28
- 0 stale (60+ days, no update in 30)
- Merged
- 0
- of the 30 latest
- Median time to merge
- Unknown
- From bots
- 1
- not listed below
Open
- #3940 fix(javascript): preserve proven WebSocket endpoint identitiesAfloat16 · opened 4 days ago
- #1840 fix(javascript): preserve Vite dependency values and indexesevenafterallisaid · opened 8 days ago
- #3802 fix(reconstruction): check transitive dependency inventorySII-YDD · opened 4 days ago
- #4773 docs: add open-source decompiler selection guideYunzenn · opened 2 days ago
- #4040 fix(browser): preserve capture evidence fidelityeco-null · opened 4 days ago
Recently merged
None from people in recent pull requests.
The 30 most recently updated pull requests.
Top contributors
- morluto82 commits · 84%
- gensokyo-dev5 commits · 5%
- N0zoM1z04 commits · 4%
- kaoru0822-kitauji3 commits · 3%
- vaidehi-snk1 commit · 1%
Of the 98 most recent commits.
Issues
- Open
- 1,225
- on the repository
- Median time to close
- Same day
- from 8 closed of the 40 latest
- Awaiting first reply
- 3
- of 32 open among the 40 latest
- Oldest open
- 99 days
Most wanted
- #3325 [Bug] Hermes setup cannot refresh a REA anchor referenced by another server1 reaction · 2 comments
Rates come from the 40 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.