openbq-org / openbb
Repository health
Security, maintenance, dependencies and license for openbq-org/openbb.
Security
75 dependencies checked (25 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 7.1/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 4d ago10/10
- License filePermissive license: Apache-2.010/10
- Tests run on pull requestsCI configured + tests present10/10
- Security policySECURITY.md present10/10
- Static analysis on commitsCodeQL action detected in workflows10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesOnly 11/33 actions pinned to SHAs2/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 6 of 72 external pull requests merged (12% of those decided), median 2 days to merge.From the 100 most recently updated pull requests, bots excluded.
Recent releases
- openbb-v5.0.030 Sept 2026 · same day as previous
- Open-Data-Platform-v2.0.030 Sept 2026 · same day as previous
- ODP30 Sept 2026 · 158 days after previous
- Open-Data-Platform-v1.0.225 Apr 2026 · 46 days after previous
- v4.7.09 Mar 2026 · 28 days after previous
Pull requests
- Open
- 13
- 0 stale (60+ days, no update in 30)
- Merged
- 6
- of the 30 latest
- Median time to merge
- 2 days
- From bots
- 0
- not listed below
Open
- #7800 [BugFix] `openbb-cli`: Make Codegen Names That Start With a Digit or Are Keywords Validdrakeo338 · opened 4 days ago
- #7760 fix(nasdaq): keep a split whose ratio has no "a : b" formartcashin · opened 13 days ago
- #7762 [BugFix] #7672-Preserve unnamed MultiIndex levels in DataFrame round-trip.amirani8137 · opened 12 days ago
- #7761 fix(eia): open oversized dataset widgets on the newest 5,000 rowsartcashin · opened 13 days ago
- #7751 fix(core): map missing inputs, timeouts and non-JSON responses to 4xx/5xxartcashin · opened 13 days ago
Recently merged
- #7757 fix(fred): drop the 5-year TIPS maturity that FRED no longer publishesartcashin · merged 18 Oct 2026
- #7758 fix(famafrench): Australia's country portfolio file is Austrlia.Datartcashin · merged 17 Oct 2026
- #7798 [BugFix] Fix TY Check Failures Raised by TY 0.0.89dlee-bq · merged 17 Oct 2026
- #7797 [Security] Update All Lock Files in the Repositorydlee-bq · merged 17 Oct 2026
- #7796 [BugFix] `openbb-cboe`: Fix cache lock so that concurrent callers in separate processes don't hangdlee-bq · merged 16 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- deeleeramone63 commits · 63%
- sandole8 commits · 8%
- dlee-bq4 commits · 4%
- artcashin2 commits · 2%
- Shreyansh17292 commits · 2%
Of the 100 most recent commits.
Issues
- Open
- 100
- issues and pull requests, as GitHub counts them
- Median time to close
- 30 days
- from 5 closed of the 12 latest
- Awaiting first reply
- 3
- of 7 open among the 12 latest
- Oldest open
- 5.5 years
Most wanted
- #7744 [Workspace RFC] Pluggable chart renderers, configurable library selection, and optional commercial licensing1 reaction · 2 comments
- #7672 [Bug] DataFrame round-trip fails for unnamed MultiIndex levels1 reaction · 2 comments
Rates come from the 12 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: Apache-2.0 · 24 deps checked · 0 potential conflicts.