mozilla-ocho / llamafile
Repository health
Security, maintenance, dependencies and license for mozilla-ocho/llamafile.
Security
2 dependencies checked (2 direct), pypi, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 5.8/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 10d ago10/10
- License filePermissive license: Apache-2.010/10
- Tests run on pull requestsCI configured + tests present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesAll actions pinned to SHAs10/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 23 of 34 external pull requests merged (74% of those decided), median 4 days to merge.From the 93 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 3
- 0 stale (60+ days, no update in 30)
- Merged
- 20
- of the 30 latest
- Median time to merge
- 6 days
- From bots
- 2
- not listed below
Open
- #1069 server: fix built-in shell tools on Windows (#1066)manunicholasjacob · opened 5 days ago
- #1049 fix: make /stats print perf metrics in TUI chat modeputramkti · opened 46 days ago
Recently merged
- #1064 docs: fix LocalScore repository linkpratikgx · merged 8 Oct 2026
- #1060 Agentfile v0.0000001aittalam · merged 8 Oct 2026
- #1061 [draft] Update llama.cpp to b11100aittalam · merged 30 Sept 2026
- #1045 docs: document API server and built-in toolsangpt · merged 16 Sept 2026
- #1055 Vulkan toolchainaittalam · merged 15 Sept 2026
The 30 most recently updated pull requests.
Top contributors
- aittalam49 commits · 49%
- cjpais17 commits · 17%
- angpt6 commits · 6%
- njbrake5 commits · 5%
- Anai-Guo4 commits · 4%
Of the 100 most recent commits.
Issues
- Open
- 216
- issues and pull requests, as GitHub counts them
- Median time to close
- 10 days
- from 17 closed of the 38 latest
- Awaiting first reply
- 8
- of 21 open among the 38 latest
- Oldest open
- 2.9 years
Most wanted
- #438 Is it possible for llamafile to use Vulkan or OpenCL Acceleration?7 reactions · 19 comments
- #15 Security5 reactions · 8 comments
- #938 Bug: Vulkan support on Windows does not work consistently1 reaction · 20 comments
Rates come from the 38 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
Packages pulled in by these were not checked.
License compatibility
Repo license: Apache-2.0 · 2 deps checked · 0 potential conflicts.