paddlepaddle / paddleocr
Repository health
Security, maintenance, dependencies and license for paddlepaddle/paddleocr.
Security
54 dependencies checked (4 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
OpenSSF Scorecard · 5.9/10
Checks sorted from strongest to weakest.
- Recent activity30 commits out of 30 and 16 issue activity out of 30 found in the last 90 days10/10
- No known vulnerabilitiesNo vulnerabilities detected10/10
- License fileLicense file detected10/10
- Least-privilege CI tokensTokens are read-only in GitHub workflows10/10
- No risky CI workflowsNo dangerous workflow patterns detected10/10
- No binaries in the repositoryBinaries present in source code9/10
- Pinned dependenciesDependency not pinned by hash detected7/10
- Code review before mergeGitHub code reviews found for 14 commits out of the last 304/10
- Branch protectionBranch protection is not maximal on development and all release branches1/10
- OpenSSF best-practices badgeNo badge detected0/10
- Fuzz testingProject is not fuzzed0/10
- Security policySecurity policy file not detected0/10
- Automated dependency updatesNo update tool detected0/10
- Signed releasesNo releases foundnot scored
- Published through a build pipelineNo published package detectednot scored
Maintenance
Outside contributions: 3 of 73 external pull requests merged (9% of those decided), median 0.9 days to merge.From the 97 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 19
- 1 stale (60+ days, no update in 30)
- Merged
- 1
- of the 30 latest
- Median time to merge
- 7 days
- From bots
- 0
- not listed below
Open
- #18362 fix: classify Go SDK response body timeoutsHanabi9248 · opened 37 days ago
- #18356 fix: apply TypeScript SDK timeouts to response bodiesHanabi9248 · opened 40 days ago
- #18401 fix(paddleocr_vl): allow empty markdown_ignore_labelsbuildwithneel · opened 4 days ago
- #18398 docs: add InvoiceFlowAI RapidOCR integration to community projectsEthanYoQ · opened 5 days ago
- #18399 fix(doc2md): read PPTX strikethrough from a:rPr, not Font.strikeMohammadHijjawi97 · opened 5 days ago
Recently merged
- #18104 [Feat] Support PP-OCRv6Bobholamovic · merged 11 Jun 2026
The 30 most recently updated pull requests.
Top contributors
- Bobholamovic31 commits · 31%
- scyyh1116 commits · 16%
- zhang-prog8 commits · 8%
- zhangyubo07226 commits · 6%
- Aidenwu02095 commits · 5%
Of the 99 most recent commits.
Issues
- Open
- 252
- issues and pull requests, as GitHub counts them
- Median time to close
- 106 days
- from 19 closed of the 55 latest
- Awaiting first reply
- 15
- of 36 open among the 55 latest
- Oldest open
- 1.2 years
Most wanted
- #18162 NotImplementedError when using PaddleOCR 3.7.0 with PaddlePaddle 3.3.11 reaction · 11 comments
Rates come from the 55 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: Apache-2.0 · 4 deps checked · 0 potential conflicts.