openai / whisper
Repository health
Security, maintenance, dependencies and license for openai/whisper.
Security
0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low
10 dependencies checked (10 direct), pypi, via deps.dev. Findings apply only to the packages and versions checked.
OpenSSF Scorecard · 4.3/10
Checks sorted from strongest to weakest.
- No binaries in the repositoryNo binaries found in the repo10/10
- No risky CI workflowsNo dangerous workflow patterns detected10/10
- License fileLicense file detected10/10
- Code review before mergeFound 20/29 approved changesets6/10
- Pinned dependenciesDependency not pinned by hash detected4/10
- Recent activity3 commits and 0 issue activity found in the last 90 days2/10
- Least-privilege CI tokensDetected GitHub workflow tokens with excessive permissions0/10
- OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
- Fuzz testingProject is not fuzzed0/10
- Security policySecurity policy file not detected0/10
- Static analysis on commitsSAST tool is not run on all commits0/10
- Published through a build pipelinePackaging workflow not detectednot scored
- Signed releasesNo releases foundnot scored
- Branch protectionScorecard could not run this check.not scored
Maintenance
31 Aug 2026
Last commit
slowing
5
Commits in the last year
84
Contributors
all time · 48 in the last 99 commits
v20250625
Latest release
~93d cadence
Outside contributions: 5 of 98 external pull requests merged (18% of those decided), median 1.6 days to merge.From the 100 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 29
- 0 stale (60+ days, no update in 30)
- Merged
- 1
- of the 30 latest
- Median time to merge
- 1 day
- From bots
- 0
- not listed below
Open
- #2895 Preserve Unicode and token boundaries when splitting malformed UTF-8GCSimba · opened today
- #2894 Normalize curly apostrophes before expanding English contractionsGCSimba · opened today
- #2892 fix(normalizer): strip non-numeric prefix and suffix symbols at string boundariesreginaldalfret · opened 2 days ago
- #2891 Report the language code when transcribe() is given a language nameRaphaelFakhri · opened 4 days ago
- #2890 Escape literal transcript text in WebVTT subtitlesedawite · opened 5 days ago
Recently merged
- #2751 [codex] Pin GitHub Actions workflow referenceshintz-openai · merged 27 Mar 2026
The 30 most recently updated pull requests.
Top contributors
- jongwook42 commits · 42%
- cclauss6 commits · 6%
- ryanheise4 commits · 4%
- petterreinholdtsen2 commits · 2%
- guillaumekln2 commits · 2%
Of the 99 most recent commits.
Issues
- Open
- 178
- issues and pull requests, as GitHub counts them
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
10
Packages checked
pypi
10
Direct packages checked
listed in the manifest
Unknown
External imports
outside packages the code imports
Packages pulled in by these were not checked.
License compatibility
Repo license: MIT · 7 deps checked · 0 potential conflicts.
License
MIT
License
Permissive
Family
0
License conflicts in dependencies
7 dependencies checked
Commercial use: Generally fine for commercial and proprietary use, subject to attribution and notice terms.