pylons / pyramid
Repository health
Security, maintenance, dependencies and license for pylons/pyramid.
Security
9 dependencies checked (9 direct), pypi, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 4.6/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Tests run on pull requestsCI configured + tests present10/10
- Automated dependency updatesDependabot configured10/10
- Recent activityLast commit 78d ago8/10
- Least-privilege CI tokensWorkflows do not declare explicit permissions (uses default)5/10
- Pinned dependenciesOnly 0/8 actions pinned to SHAs2/10
- Code review before mergeOnly 4/20 recent PRs had requested reviewers2/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- License fileLicense could not be verifiednot scored
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 25 of 55 external pull requests merged (61% of those decided), median 45.9 days to merge.From the 92 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 13
- 12 stale (60+ days, no update in 30)
- Merged
- 10
- of the 30 latest
- Median time to merge
- 5 days
- From bots
- 3
- not listed below
Open
- #3824 Correct the IDict pop declaration and the popitem docstringdchaudhari7177 · opened 32 days ago
- #3816 Reorganize resolversluhn · opened 207 days ago
- #3823 Replace pkg_resources with importlib.resources.Natim · opened 79 days ago
- #3821 fix: correct typos in source, tests, and docsTheGreatApollyon · opened 83 days ago
- #3750 use AssetResolver internallymmerickel · opened 2.7 years ago
Recently merged
- #3815 Resolve asset APIsluhn · merged 4 Aug 2026
- #3822 Add .mailmap and update my CONTRIBUTORS.txt entrydigitalresistor · merged 2 Aug 2026
- #3810 try using uv to install python versionsmmerickel · merged 9 Mar 2026
- #3783 updated build setup to modern pyproject.toml form.ChrisBarker-NOAA · merged 25 Feb 2026
- #3808 Fix deprecated stdlib usage in testsslav0nic · merged 24 Feb 2026
The 30 most recently updated pull requests.
Top contributors
- mmerickel50 commits · 50%
- ChrisBarker-NOAA17 commits · 17%
- luhn16 commits · 16%
- digitalresistor6 commits · 6%
- tseaver4 commits · 4%
Of the 100 most recent commits.
Issues
- Open
- 91
- issues and pull requests, as GitHub counts them
- Median time to close
- 1 day
- from 23 closed of the 37 latest
- Awaiting first reply
- 4
- of 14 open among the 37 latest
- Oldest open
- 14.5 years
Most wanted
- #3731 pkg_resources is deprecated8 reactions · 45 comments
- #2638 experiment with shipping type annotations7 reactions · 39 comments
- #3270 Support poetry, flit, pipenv, or ...?1 reaction · 45 comments
Rates come from the 37 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
Packages pulled in by these were not checked.