RepoPilot

tiangolo / sqlmodel

Search tiangolo/sqlmodel

GitHub

Repository health

Security, maintenance, dependencies and license for tiangolo/sqlmodel.

Security

0
Critical
0 direct
0
High
0 direct
0
Moderate
0
Low

3 dependencies checked (3 direct), pypi, via deps.dev. Findings apply only to the packages and versions checked.

OpenSSF Scorecard · 7.1/10

Checks sorted from strongest to weakest.

  • Recent activity30 commits and 0 issue activity found in the last 90 days10/10
  • No risky CI workflowsNo dangerous workflow patterns detected10/10
  • No binaries in the repositoryNo binaries found in the repo10/10
  • Least-privilege CI tokensGitHub workflow tokens follow principle of least privilege10/10
  • License fileLicense file detected10/10
  • Security policySecurity policy file detected10/10
  • Static analysis on commitsSAST tool is run on all commits10/10
  • Pinned dependenciesDependency not pinned by hash detected9/10
  • Branch protectionBranch protection is not maximal on development and all release branches3/10
  • Code review before mergeFound 1/19 approved changesets0/10
  • OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
  • Fuzz testingProject is not fuzzed0/10
  • Published through a build pipelinePackaging workflow not detectednot scored
  • Signed releasesNo releases foundnot scored

Maintenance

15 Oct 2026
Last commit
active
100+
Commits in the last year
115
Contributors
all time · 4 in the last 59 commits
0.0.48
Latest release
~11d cadence

Outside contributions: 1 of 35 external pull requests merged (5% of those decided), median 52.4 days to merge.From the 75 most recently updated pull requests, bots excluded.

Recent releases

  • 0.0.486 Oct 2026 · 13 days after previous
  • 0.0.4723 Sept 2026 · 1 day after previous
  • 0.0.4622 Sept 2026 · same day as previous
  • 0.0.4521 Sept 2026 · same day as previous
  • 0.0.4421 Sept 2026 · same day as previous

Pull requests

Open
9
1 stale (60+ days, no update in 30)
Merged
15
of the 30 latest
Median time to merge
Same day
From bots
9
not listed below

The 30 most recently updated pull requests.

Top contributors

Of the 59 most recent commits.

Issues

Open
53
issues and pull requests, as GitHub counts them

Most wanted

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

3
Packages checked
pypi
3
Direct packages checked
listed in the manifest
Unknown
External imports
outside packages the code imports

Packages pulled in by these were not checked.

License compatibility

Repo license: MIT · 3 deps checked · 0 potential conflicts.

License

MIT
License
Permissive
Family
0
License conflicts in dependencies
3 dependencies checked
Commercial use: Generally fine for commercial and proprietary use, subject to attribution and notice terms.