realworld-apps / realworld
Repository health
Security, maintenance, dependencies and license for realworld-apps/realworld.
Security
13 dependencies checked (13 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 6.9/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- License filePermissive license: MIT10/10
- Tests run on pull requestsCI configured + tests present10/10
- Automated dependency updatesDependabot configured10/10
- Static analysis on commitsCodeQL action detected in workflows10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Recent activityLast commit 58d ago8/10
- Pinned dependenciesOnly 1/11 actions pinned to SHAs2/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Security policyNo SECURITY.md found0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 1 of 24 external pull requests merged (4% of those decided), median 0.2 days to merge.From the 24 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 1
- 0 stale (60+ days, no update in 30)
- Merged
- 5
- of the 30 latest
- Median time to merge
- 134 days
- From bots
- 19
- not listed below
Open
None from people in recent pull requests.
Recently merged
- #1714 fix: run Bruno tests from collection rootakydd · merged 18 May 2026
The 30 most recently updated pull requests.
Top contributors
Of the 96 most recent commits.
Issues
- Open
- 30
- issues and pull requests, as GitHub counts them
- Median time to close
- 2.5 years
- from 23 closed of the 31 latest
- Awaiting first reply
- 2
- of 8 open among the 31 latest
- Oldest open
- 9.5 years
Rates come from the 31 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
Packages pulled in by these were not checked.
License compatibility
Repo license: MIT · 13 deps checked · 0 potential conflicts.