storytold / photocraft
Repository health
Security, maintenance, dependencies and license for storytold/photocraft.
Security
50 dependencies checked (0 direct), cargo, via deps.dev. Findings apply only to the packages and versions checked.
- GHSA-64wv-8vwp-xgw2 · ashUse of Uninitialized Resource in ash.Ask about this findingMODERATE
- GHSA-qj69-c89v-jwq2 · ashReading on uninitialized memory may cause UB ( `util::read_spv()` )Ask about this findingMODERATE
- RUSTSEC-2021-0090 · ashReading on uninitialized memory may cause UB ( `util::read_spv()` )Ask about this findingMODERATE
Security checks (RepoPilot estimate) · 6.4/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: Apache-2.010/10
- Tests run on pull requestsCI configured + tests present10/10
- Security policySECURITY.md present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependencies20/36 actions pinned to SHAs6/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 7 of 99 external pull requests merged (44% of those decided), median 0.9 days to merge.From the 99 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 27
- 0 stale (60+ days, no update in 30)
- Merged
- 0
- of the 30 latest
- Median time to merge
- Unknown
- From bots
- 0
- not listed below
Open
- #8770 fix(blur): Gaussian Blur radii below 1 blur by the radius asked forFinnNk · opened today
- #8727 feat(engine): design timeline, a parametric and replayable document historyXaero252 · opened today
- #8768 fix(text): bound untrusted font and PSD text processingdylanmtaylor · opened today
- #8769 fix(vector): bound hostile geometry and raster workdylanmtaylor · opened today
- #8767 fix(psd): keep pattern budget charges on parse failuredylanmtaylor · opened today
Recently merged
None from people in recent pull requests.
The 30 most recently updated pull requests.
Top contributors
- aiongg69 commits · 69%
- dylanmtaylor12 commits · 12%
- davidmann49 commits · 9%
- James-Chapman5 commits · 5%
- Brandon Thomas2 commits · 2%
Of the 100 most recent commits.
Issues
- Open
- 2,720
- issues and pull requests, as GitHub counts them
- Median time to close
- 4 days
- from 3 closed of the 37 latest
- Awaiting first reply
- 0
- of 34 open among the 37 latest
- Oldest open
- 18 days
Most wanted
- #3263 Timeline: implement Photoshop-style frame-animation mode15 reactions · 18 comments
- #8735 Wrong mouse icon for corner resizing or dragging2 reactions · 1 comment
- #8760 Slow Render1 reaction · 3 comments
Rates come from the 37 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.