multica-ai / multica
Repository health
Security, maintenance, dependencies and license for multica-ai/multica.
Security
57 dependencies checked (7 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 4.4/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: Apache-2.010/10
- Tests run on pull requestsCI configured + tests present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesOnly 0/88 actions pinned to SHAs2/10
- Code review before mergeOnly 1/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionDefault branch 'main' has no protection rule0/10
Maintenance
Outside contributions: 15 of 68 external pull requests merged (31% of those decided), median 0.5 days to merge.From the 100 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 9
- 0 stale (60+ days, no update in 30)
- Merged
- 5
- of the 30 latest
- Median time to merge
- Same day
- From bots
- 0
- not listed below
Open
- #9472 MUL-8200: fix(autopilot): don't fail create_issue runs on issue blockedmultica-eve · opened 1 day ago
- #9489 fix(runtimes): show Qoder Cloud Agents without encryption setuphellomypastor · opened today
- #9487 feat(server): add optional claim constraint policy SPI (shadow-only)Thneoly · opened today
- #9486 fix(agent): record OpenCode provider-reported costtadas-subonis · opened today
- #9485 feat(autopilots): payload conditions on webhook event filtersgsayer · opened 1 day ago
Recently merged
- #9490 MUL-8216: docs(changelog): add workflow GA to 0.7.0 titlemultica-eve · merged 24 Oct 2026
- #9184 MUL-7969: feat(server): record structured claim decision outcomesThneoly · merged 23 Oct 2026
- #4322 MUL-3433: fix(daemon): restore claim slow-log payload observability without gzipHzzzzzx · merged 21 Jun 2026
- #4274 test: enable -race detector in Go test pipeline (WOR-61)Hzzzzzx · merged 18 Jun 2026
- #4267 MUL-3384 refactor(editor): dedupe upload-node scan and markdown normalization (WOR-59)Hzzzzzx · merged 18 Jun 2026
The 30 most recently updated pull requests.
Top contributors
- multica-eve32 commits · 32%
- forrestchang15 commits · 15%
- Bohan-J6 commits · 6%
- Frezc3 commits · 3%
- tim-smart3 commits · 3%
Of the 100 most recent commits.
Issues
- Open
- 1,872
- issues and pull requests, as GitHub counts them
- Median time to close
- 2 days
- from 12 closed of the 25 latest
- Awaiting first reply
- 10
- of 13 open among the 25 latest
- Oldest open
- 203 days
Rates come from the 25 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: Apache-2.0 · 7 deps checked · 0 potential conflicts.