octocat / spoon-knife
Repository health
Security advisories, maintenance activity, dependencies and license for octocat/spoon-knife, with what was checked and what was not.
Security
Dependency advisories were not checked: no supported dependency manifest was captured. This does not mean the project has no vulnerable dependencies. Inspect its manifests on GitHub ↗
OpenSSF Scorecard · 0.3/10
Checks sorted from strongest to weakest.
- Code-ReviewOnly 0/20 recent PRs had requested reviewers2/10
- MaintainedStale — last commit 783d ago0/10
- CI-TestsNo CI workflows detected0/10
- Dependency-Update-ToolNo Dependabot or Renovate config found0/10
- Security-PolicyNo SECURITY.md found0/10
- SASTNo SAST workflow detected0/10
- Branch-ProtectionDefault branch 'main' has no protection rule0/10
- LicenseLicense could not be verifiednot scored
- Token-PermissionsNo workflows to inspectnot scored
- Pinned-DependenciesNo workflows to inspectnot scored
Maintenance
Outside contributions: 1 of 100 external pull requests merged (3% of those decided), median 2347.3 days to merge.From the 100 most recently updated pull requests, bots excluded.
Commit activity
3 commits sampledClick a bar to browse commits — or open GitHub for the full month ↓
Work rhythm
Commits by day of week
Pull request health
How fast do PRs resolve?
Days from open to merged / closed, last 14 PRs.
Pending right now16 open PRs
Issue triage — last 12 weeks
Blue bars = issues opened that week, green = closed. Healthy projects keep these roughly in balance — a persistently bigger blue bar means an opening backlog. open issues on GitHub ↗
Top contributors
Issue health
Computed from GitHub Issues — no estimates. Per-issue rates use the 5 most-recently-updated issues (recent, not all-time); the open total and oldest-open age are repo-wide.
Total open on the repo (authoritative).
From 4 recently-closed issues. p90 8.9y.
Age of the longest-open unresolved issue.
1 of 1 recent open issues have no comments yet.
0 of 1 recent open issues had no update in 30d+.
1 of 1 recent open issues are unlabeled.
What the backlog is about
AI-generatedOpen issues grouped into themes by an LLM from their titles — a summary, not an authoritative classification. Numbers reflect the 1 most-recently-active open issues.
Per-issue rates are computed from a sample of 5 most-recently-updated issues, so they describe recent behavior rather than the all-time backlog. Reaction and comment counts come straight from GitHub.
Dependencies
Checked packages and import counts
Checked counts describe advisory coverage, not the repository’s complete dependency inventory. External imports come from a separate source-code graph.