nationalsecurityagency / ghidra
Repository health
Security, maintenance, dependencies and license for nationalsecurityagency/ghidra.
Security
2 dependencies checked (2 direct), pypi, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 4.9/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 1d ago10/10
- License filePermissive license: Apache-2.010/10
- Tests run on pull requestsCI configured + tests present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesOnly 0/12 actions pinned to SHAs2/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 14 of 100 external pull requests merged (56% of those decided), median 6 days to merge.From the 100 most recently updated pull requests, bots excluded.
Recent releases
- Ghidra_12.2_build22 Oct 2026 · 31 days after previous
- Ghidra_12.1.4_build21 Sept 2026 · 34 days after previous
- Ghidra_12.1.3_build18 Aug 2026 · 74 days after previous
- Ghidra_12.1.2_build5 Jun 2026 · 23 days after previous
- Ghidra_12.1_build13 May 2026 · 70 days after previous
Pull requests
- Open
- 23
- 0 stale (60+ days, no update in 30)
- Merged
- 4
- of the 30 latest
- Median time to merge
- 10 days
- From bots
- 0
- not listed below
Open
- #9982 PowerPC: add r2, f14-f31, cr2 and cr3 to unaffected in ppc_64_32.cspecFlashHit · opened 2 days ago
- #9993 Parent dialogs to the tool's last active window when no window is activelzandman · opened today
- #9992 Fix call-site overrides returning a struct through a hidden pointerBayLee4 · opened today
- #9971 AArch64: Add missing SYS aliasesCUB3D · opened 3 days ago
- #9846 Preserve accepted associations when updating the Version Tracking cacherudycelekli · opened 10 days ago
Recently merged
- #9959 Objective-C Message Analyzer: guard two lookups that abort the analysisnanomad · merged 22 Oct 2026
- #9934 Fix help builds failing when a path contains a module namesathish123m · merged 22 Oct 2026
- #9828 Preserve PDB enum underlying widths and signed valuesrudycelekli · merged 22 Oct 2026
- #9814 Resolve PDB complex primitive widths and decode their listing valuesrudycelekli · merged 22 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- ryanmkurtz62 commits · 62%
- rudycelekli11 commits · 11%
- dragonmacher8 commits · 8%
- ghidra15 commits · 5%
- dev7473682 commits · 2%
Of the 100 most recent commits.
Issues
- Open
- 2,141
- issues and pull requests, as GitHub counts them
- Median time to close
- 13 days
- from 7 closed of the 34 latest
- Awaiting first reply
- 10
- of 27 open among the 34 latest
- Oldest open
- 7.6 years
Most wanted
- #3772 Enhancements to structure editor (to support inheritance)2 reactions · 15 comments
- #9747 RecoverClassesFromRTTIScript "More than one Base Class Array"1 reaction · 7 comments
Rates come from the 34 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
Packages pulled in by these were not checked.
License compatibility
Repo license: Apache-2.0 · 2 deps checked · 0 potential conflicts.