square / retrofit
Repository health
Security, maintenance, dependencies and license for square/retrofit.
Security
Dependencies were not checked for known security issues, because RepoPilot found no dependency manifest it can read. That does not mean they are safe. Inspect its manifests on GitHub ↗
OpenSSF Scorecard · 6.3/10
Checks sorted from strongest to weakest.
- Code review before mergeAll changesets reviewed10/10
- Recent activity30 commits and 9 issue activity found in the last 90 days10/10
- No risky CI workflowsNo dangerous workflow patterns detected10/10
- Pinned dependenciesAll dependencies are pinned10/10
- License fileLicense file detected10/10
- Published through a build pipelinePackaging workflow detected10/10
- No binaries in the repositoryBinaries present in source code9/10
- Least-privilege CI tokensDetected GitHub workflow tokens with excessive permissions0/10
- OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
- Fuzz testingProject is not fuzzed0/10
- Security policySecurity policy file not detected0/10
- Static analysis on commitsSAST tool is not run on all commits0/10
- Branch protectionScorecard could not run this check.not scored
- Signed releasesNo releases foundnot scored
Maintenance
Outside contributions: 9 of 22 external pull requests merged (56% of those decided), median 0.3 days to merge.From the 26 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 8
- 0 stale (60+ days, no update in 30)
- Merged
- 20
- of the 30 latest
- Median time to merge
- Same day
- From bots
- 24
- not listed below
Open
- #4760 Preserve RequestBody flags when overriding Content-Typecuishuang · opened 47 days ago
- #4552 Add a Jackson 3 convertersschuberth · opened 351 days ago
- #4780 Publish a Gradle version cataloghmzgtl16 · opened 20 days ago
Recently merged
- #4784 Include extra sources and docs in artifactsGoooler · merged 20 Oct 2026
- #4761 Add an optional marker interface to keep empty Retrofit servicesiVamsi · merged 20 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- Goooler9 commits · 32%
- iVamsi5 commits · 18%
- JakeWharton4 commits · 14%
- swankjesse4 commits · 14%
- Amir-yazdanmanesh2 commits · 7%
Of the 28 most recent commits.
Issues
- Open
- 148
- issues and pull requests, as GitHub counts them
- Median time to close
- 6.3 years
- from 20 closed of the 25 latest
- Awaiting first reply
- 1
- of 5 open among the 25 latest
- Oldest open
- 12.8 years
Most wanted
- #2180 Retrofit 4.x Things16 reactions · 55 comments
- #3216 Provide a way to display percentage progress while uploading files3 reactions · 12 comments
Rates come from the 25 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.