RepoPilot

neithere / argh

Search neithere/argh

GitHub

Repository health

Security, maintenance, dependencies and license for neithere/argh.

Security

Dependencies were not checked for known security issues, because RepoPilot found no dependency manifest it can read. That does not mean they are safe. Inspect its manifests on GitHub ↗

OpenSSF Scorecard · 3.3/10

Checks sorted from strongest to weakest.

  • No risky CI workflowsNo dangerous workflow patterns detected10/10
  • No binaries in the repositoryNo binaries found in the repo10/10
  • License fileLicense file detected10/10
  • Code review before mergeFound 2/9 approved changesets2/10
  • Recent activity0 commits and 0 issue activity found in the last 90 days0/10
  • Least-privilege CI tokensDetected GitHub workflow tokens with excessive permissions0/10
  • Pinned dependenciesDependency not pinned by hash detected0/10
  • OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
  • Security policySecurity policy file not detected0/10
  • Fuzz testingProject is not fuzzed0/10
  • Static analysis on commitsSAST tool is not run on all commits0/10
  • Published through a build pipelinePackaging workflow not detectednot scored
  • Signed releasesNo releases foundnot scored
  • Branch protectionScorecard could not run this check.not scored

Maintenance

4 Sept 2025
Last commit
stale
0
Commits in the last year
25
Contributors
all time · 5 in the last 100 commits
v0.31.3
Latest release
~30d cadence

Outside contributions: 21 of 43 external pull requests merged (64% of those decided), median 36 days to merge.From the 87 most recently updated pull requests, bots excluded.

Recent releases

  • v0.31.313 Jul 2024 · 171 days after previous
  • v0.31.224 Jan 2024 · 5 days after previous
  • v0.31.119 Jan 2024 · 20 days after previous
  • v0.31.030 Dec 2023 · 5 days after previous
  • v0.30.525 Dec 2023 · 51 days after previous

Pull requests

Open
10
9 stale (60+ days, no update in 30)
Merged
19
of the 30 latest
Median time to merge
Same day
From bots
1
not listed below

Open

Recently merged

The 30 most recently updated pull requests.

Top contributors

Of the 100 most recent commits.

Issues

Open
47
issues and pull requests, as GitHub counts them
Median time to close
48 days
from 31 closed of the 48 latest
Awaiting first reply
8
of 17 open among the 48 latest
Oldest open
13.2 years

Most wanted

Rates come from the 48 most recently updated issues; the open count and oldest issue cover the whole repository.

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

Not checked
Packages checked
Unknown
External imports
outside packages the code imports

License

LGPL-3.0
License
Weak copyleft
Family
Unknown
License conflicts in dependencies
Dependency licenses were not checked
Commercial use: LGPL generally permits linking from proprietary code, but changes to the library itself must be shared. Usually workable commercially with care.