netdata / netdata
Repository health
Security, maintenance, dependencies and license for netdata/netdata.
Security
0
Critical
0 direct
0
High
0 direct
1
Moderate
0
Low
50 dependencies checked (0 direct), cargo, via deps.dev. Findings apply only to the packages and versions checked.
- RUSTSEC-2025-0141 · bincodeBincode is unmaintainedAsk about this findingMODERATE
OpenSSF Scorecard · 7.8/10
Checks sorted from strongest to weakest.
- Recent activity30 commits and 15 issue activity found in the last 90 days10/10
- No risky CI workflowsNo dangerous workflow patterns detected10/10
- License fileLicense file detected10/10
- Security policySecurity policy file detected10/10
- Fuzz testingProject is fuzzed10/10
- Static analysis on commitsSAST tool is run on all commits10/10
- Published through a build pipelinePackaging workflow detected10/10
- No binaries in the repositoryBinaries present in source code9/10
- Pinned dependenciesDependency not pinned by hash detected9/10
- Code review before mergeFound 20/25 approved changesets8/10
- OpenSSF best-practices badgeBadge detected: Passing5/10
- Signed releases2 out of the last 5 releases have a total of 2 signed artifacts.3/10
- Least-privilege CI tokensDetected GitHub workflow tokens with excessive permissions0/10
- Branch protectionScorecard could not run this check.not scored
Maintenance
23 Oct 2026
Last commit
active
100+
Commits in the last year
695
Contributors
all time · 8 in the last 83 commits
v2.12.1
Latest release
~26d cadence
Outside contributions: 8 of 26 external pull requests merged (80% of those decided), median 0 days to merge.From the 87 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 18
- 0 stale (60+ days, no update in 30)
- Merged
- 11
- of the 30 latest
- Median time to merge
- Same day
- From bots
- 2
- not listed below
Open
- #24355 Sync eBPF branchesthiagoftsm · opened 6 days ago
- #24408 connect-to: try remaining addresses on connect timeoutLuv-Goel · opened today
- #24407 docs: add volume discounts, the University of Amsterdam study, the Cloud availability commitment and street-level flow maps to the product descriptionktsaou · opened today
- #24369 test(query): extend tier coverage and extrema regressionsktsaou · opened 5 days ago
- #24406 fix(query): continue across exhausted tiers while later plans remainktsaou · opened today
Recently merged
- #24405 fix(db): publish completed tier points after missed flush boundariesktsaou · merged 22 Oct 2026
- #24400 dbengine: rebuild a journal v2 rejected at startup from its journal v1stelfrag · merged 22 Oct 2026
- #24352 fix(windows): skip space charting for optical and read-only drivesFrancescoCastaldi · merged 22 Oct 2026
- #24242 ml: let k-means models with a rounding-only spread abstainstelfrag · merged 22 Oct 2026
- #24390 Bundle MSYS2's msys2-runtime 3.6.11 DLL instead of building itstelfrag · merged 22 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- stelfrag42 commits · 51%
- netdatabot13 commits · 16%
- ilyam813 commits · 16%
- vkalintiris5 commits · 6%
- Ferroin4 commits · 5%
Of the 83 most recent commits.
Issues
- Open
- 459
- issues and pull requests, as GitHub counts them
- Median time to close
- Same day
- from 7 closed of the 19 latest
- Awaiting first reply
- 6
- of 12 open among the 19 latest
- Oldest open
- 10.0 years
Rates come from the 19 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
50
Packages checked
cargo
0
Direct packages checked
listed in the manifest
50
Transitive packages checked
pulled in by other packages
Unknown
External imports
outside packages the code imports
License
GPL-3.0
License
Copyleft
Family
Unknown
License conflicts in dependencies
Dependency licenses were not checked
Commercial use: GPL requires derivative works to also be GPL — a significant constraint for closed-source products. Review before commercial use.