nexu-io / open-design
Repository health
Security, maintenance, dependencies and license for nexu-io/open-design.
Security
60 dependencies checked (10 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 4.9/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: Apache-2.010/10
- Tests run on pull requestsCI configured + tests present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesOnly 0/10 actions pinned to SHAs2/10
- Code review before mergeOnly 5/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 8 of 60 external pull requests merged (47% of those decided), median 1 day to merge.From the 61 most recently updated pull requests, bots excluded.
Recent releases
- open-design-v0.26.122 Oct 2026 · 2 days after previous
- open-design-v0.26.020 Oct 2026 · 5 days after previous
- open-design-v0.25.015 Oct 2026 · 21 days after previous
- open-design-v0.24.124 Sept 2026 · 2 days after previous
- open-design-v0.24.022 Sept 2026 · 2 days after previous
Pull requests
- Open
- 24
- 0 stale (60+ days, no update in 30)
- Merged
- 5
- of the 30 latest
- Median time to merge
- Same day
- From bots
- 12
- not listed below
Open
- #9020 fix(web): focus and announce error feedback when onboarding Continue …vijaykiran06 · opened today
- #5567 fix: support fixed web base paths for self-hosted deploymentszhuziqi97 · opened 101 days ago
- #9018 fix(daemon): read completions carried in a data envelopeXxx91n · opened today
- #8347 fix(web): add keyboard navigation to creation type pickerroian6 · opened 31 days ago
- #8623 fix(deploy): propagate release version into Docker runtimeHaiYangBG1 · opened 14 days ago
Recently merged
None from people in recent pull requests.
The 30 most recently updated pull requests.
Top contributors
- Siri-Ray16 commits · 27%
- lefarcen10 commits · 17%
- alchemistklk7 commits · 12%
- PerishCode5 commits · 8%
- mrcfps4 commits · 7%
Of the 60 most recent commits.
Issues
- Open
- 1,256
- issues and pull requests, as GitHub counts them
- Awaiting first reply
- 0
- of 18 open among the 18 latest
- Oldest open
- 174 days
Most wanted
- #4253 [Bug]: New project drop-down box bug2 reactions · 46 comments
Rates come from the 18 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: Apache-2.0 · 3 deps checked · 0 potential conflicts.