stablyai / orca
Repository health
Security, maintenance, dependencies and license for stablyai/orca.
Security
75 dependencies checked (25 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 4.4/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: MIT10/10
- Tests run on pull requestsCI configured + tests present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesOnly 0/30 actions pinned to SHAs2/10
- Code review before mergeOnly 2/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionDefault branch 'main' has no protection rule0/10
Maintenance
Outside contributions: 38 of 97 external pull requests merged (84% of those decided), median 1 day to merge.From the 99 most recently updated pull requests, bots excluded.
Recent releases
- v1.4.23721 Oct 2026 · same day as previous
- v1.4.23520 Oct 2026 · same day as previous
- v1.4.23320 Oct 2026 · 1 day after previous
- v1.4.23220 Oct 2026 · -1 days after previous
- mobile-android-v0.0.5820 Oct 2026 · 2 days after previous
Pull requests
- Open
- 26
- 0 stale (60+ days, no update in 30)
- Merged
- 2
- of the 30 latest
- Median time to merge
- Same day
- From bots
- 0
- not listed below
Open
- #30449 Source Control AI actions use saved chat models and permissionsbrennanb2025 · opened 4 days ago
- #29008 Prevent silent coordinator takeovers in orchestrationbrennanb2025 · opened 8 days ago
- #32182 fix(workspace): show launch actions in empty tab groupsAmethystLiang · opened today
- #30644 build: generate the RPC params catalog and bundled skill guides at build timebrennanb2025 · opened 4 days ago
- #32190 fix(terminal): reject creates for durably closed tab identitiesnwparker · opened today
Recently merged
- #32174 fix(mobile): finish bundle downloads over slow links with smaller rangesnwparker · merged 23 Oct 2026
- #32172 Refine Agent Dashboard lifecycle handlingAmethystLiang · merged 23 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- nwparker29 commits · 29%
- Jinwoo-H28 commits · 28%
- AmoabaKelvin17 commits · 17%
- AmethystLiang11 commits · 11%
- brennanb20258 commits · 8%
Of the 100 most recent commits.
Issues
- Open
- 8,652
- issues and pull requests, as GitHub counts them
- Median time to close
- 4 days
- from 2 closed of the 11 latest
- Awaiting first reply
- 4
- of 9 open among the 11 latest
- Oldest open
- 199 days
Most wanted
- #12157 [Feature]: Optionally send messages automatically when dictation finishes1 reaction · 2 comments
- #12893 feat: Allow more than one mobile emulator at a time (one per worktree)1 reaction · 3 comments
Rates come from the 11 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: MIT · 23 deps checked · 0 potential conflicts.