paperclipai / paperclip
Repository health
Security, maintenance, dependencies and license for paperclipai/paperclip.
Security
56 dependencies checked (6 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 5.3/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: MIT10/10
- Tests run on pull requestsCI configured + tests present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependencies18/22 actions pinned to SHAs6/10
- Code review before mergeOnly 2/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 4 of 95 external pull requests merged (36% of those decided), median 0 days to merge.From the 95 most recently updated pull requests, bots excluded.
Recent releases
- v2026.1012.012 Oct 2026 · 6 days after previous
- v2026.1005.06 Oct 2026 · 5 days after previous
- v2026.1001.02 Oct 2026 · 10 days after previous
- v2026.916.121 Sept 2026 · 5 days after previous
- v2026.916.016 Sept 2026 · 15 days after previous
Pull requests
- Open
- 27
- 0 stale (60+ days, no update in 30)
- Merged
- 2
- of the 30 latest
- Median time to merge
- 1 day
- From bots
- 0
- not listed below
Open
- #5369 fix(recovery + llm + ui): recovery notice validation, OPENAI_BASE_URL support, new-agent adapter defaultsapoapostolov · opened 169 days ago
- #17243 fix(runner): record the plugin-prepared working directorynickyleach · opened today
- #17230 fix(server): stable per-connection HOME path for prompt-cache reusecalvindomenico · opened today
- #17134 fix(evals): bound retained workflow artifact bytescryppadotta · opened 1 day ago
- #17096 feat(evals): detect missing scheduled campaigns without paid retriescryppadotta · opened 1 day ago
Recently merged
- #16892 fix: admit documented sandbox task context routescryppadotta · merged 19 Oct 2026
- #13602 fix(task-chat): selecting an option no longer jumps to the next questionscotttong · merged 18 Sept 2026
The 30 most recently updated pull requests.
Top contributors
- cryppadotta71 commits · 72%
- nickyleach12 commits · 12%
- devinfoley11 commits · 11%
- tonio-alucema4 commits · 4%
- scotttong1 commit · 1%
Of the 99 most recent commits.
Issues
- Open
- 6,421
- issues and pull requests, as GitHub counts them
- Awaiting first reply
- 13
- of 32 open among the 32 latest
- Oldest open
- 232 days
Most wanted
- #13725 Claude subscription connections stop working about 8 hours after sign-in and cannot refresh11 reactions · 10 comments
- #14134 Task-session resume never happens for agents on managed AI connections (per-run mkdtemp HOME changes the session fingerprint; home deleted after each run)2 reactions · 5 comments
- #13730 PATCH /api/issues/{id} cancels the caller's own run when an agent reassigns its own issue (2026.916.0)2 reactions · 9 comments
Rates come from the 32 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: MIT · 6 deps checked · 0 potential conflicts.