stevemao / left-pad
Repository health
Security advisories, maintenance activity, dependencies and license for stevemao/left-pad, with what was checked and what was not.
Security
3 dependencies checked (3 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
OpenSSF Scorecard · 3.9/10
Checks sorted from strongest to weakest.
- Binary-Artifactsno binaries found in the repo10/10
- Fuzzingproject is fuzzed10/10
- Licenselicense file detected10/10
- Code-ReviewFound 12/19 approved changesets -- score normalized to 66/10
- Maintainedproject is archived0/10
- CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected0/10
- Security-Policysecurity policy file not detected0/10
- Branch-Protectionbranch protection not enabled on development/release branches0/10
- SASTSAST tool is not run on all commits -- score normalized to 00/10
- Dangerous-Workflowno workflows foundnot scored
- Packagingpackaging workflow not detectednot scored
- Pinned-Dependenciesno dependencies foundnot scored
- Token-PermissionsNo tokens foundnot scored
- Signed-Releasesno releases foundnot scored
Maintenance
Outside contributions: 18 of 40 external pull requests merged (55% of those decided), median 0 days to merge.From the 42 most recently updated pull requests, bots excluded.
Commit activity
72 commits sampledClick a bar to browse commits — or open GitHub for the full month ↓
Work rhythm
Commits by day of week
Pull request health
How fast do PRs resolve?
Days from open to merged / closed, last 23 PRs.
Pending right now7 open PRs
⚠ 7 stale PRs — open more than 60 days, no update in 30+
Long-running PRs without recent activity are usually maintainer-bandwidth signals — review process bottleneck, orphaned branches, or quietly abandoned work.
Recently merged17 PRs in the recent window
Top contributors
Issue health
Computed from GitHub Issues — no estimates. Per-issue rates use the 25 most-recently-updated issues (recent, not all-time); the open total and oldest-open age are repo-wide.
Total open on the repo (authoritative).
From 22 recently-closed issues. p90 6mo.
Age of the longest-open unresolved issue.
1 of 3 recent open issues have no comments yet.
3 of 3 recent open issues had no update in 30d+.
3 of 3 recent open issues are unlabeled.
What the backlog is about
AI-generatedOpen issues grouped into themes by an LLM from their titles — a summary, not an authoritative classification. Numbers reflect the 3 most-recently-active open issues.
Most-wanted
Open issues with the most positive reactions — what the community is asking for.
Most-discussed
Open issues with the most comments — where the conversation is.
Labels in the recent sample
Per-issue rates are computed from a sample of 25 most-recently-updated issues, so they describe recent behavior rather than the all-time backlog. Reaction and comment counts come straight from GitHub.
Dependencies
Checked packages and import counts
Checked counts describe advisory coverage, not the repository’s complete dependency inventory. External imports come from a separate source-code graph.