unionlabs / union
Repository health
Security, maintenance, dependencies and license for unionlabs/union.
Security
52 dependencies checked (2 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 4.7/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- License filePermissive license: Apache-2.010/10
- Tests run on pull requestsCI configured + tests present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Recent activityLast commit 89d ago8/10
- Pinned dependenciesOnly 0/64 actions pinned to SHAs2/10
- Code review before mergeOnly 3/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 64 of 88 external pull requests merged (90% of those decided), median 0 days to merge.From the 100 most recently updated pull requests, bots excluded.
Recent releases
- bundle-union-testnet-10/v1.3.0-rc418 Jun 2026 · 5 days after previous
- bundle-union-testnet-10/v1.3.0-rc313 Jun 2026 · 5 days after previous
- uniond/v1.3.0-rc28 Jun 2026 · same day as previous
- bundle-union-testnet-10/v1.3.0-rc28 Jun 2026 · 21 days after previous
- uniond/v1.3.0-rc118 May 2026 · same day as previous
Pull requests
- Open
- 9
- 5 stale (60+ days, no update in 30)
- Merged
- 17
- of the 30 latest
- Median time to merge
- 3 days
- From bots
- 0
- not listed below
Open
- #5489 ci: report spelling errors in treefmtpederbe · opened 31 days ago
- #5490 fix(voyager): check source state before relaying handshakesdavidscottpope-gif · opened 23 days ago
- #5473 Fix galoisd signature count checkssamsamtrum · opened 126 days ago
- #5483 fix(gno): use first present precommit for Commit height/round instead of index 0aronpark1007 · opened 60 days ago
- #5484 feat(gno): support simulated and dynamic gas pricing for tx feesaronpark1007 · opened 60 days ago
Recently merged
- #5475 feat(u): add `u slot` subcommand for Solidity storage slot computationbit2swaz · merged 25 Jul 2026
- #5471 fix(galoisd): correct signature/validator count check in Pollbit2swaz · merged 25 Jul 2026
- #5479 Contentful exoduscor · merged 17 Jul 2026
- #5476 fix(voyager/state-gno): template hardcoded core realm in query_packet_by_hashtbruyelle · merged 30 Jun 2026
- #5474 fix(gno): update CanonicalPartSetHeader amino encoding to match gnolang/gno#5716aronpark1007 · merged 22 Jun 2026
The 30 most recently updated pull requests.
Top contributors
- benluelo42 commits · 42%
- PoisonPhang31 commits · 31%
- cor10 commits · 10%
- ehegnes5 commits · 5%
- enlightened884 commits · 4%
Of the 100 most recent commits.
Issues
- Open
- 196
- issues and pull requests, as GitHub counts them
- Median time to close
- Same day
- from 7 closed of the 17 latest
- Awaiting first reply
- 3
- of 10 open among the 17 latest
- Oldest open
- 3.4 years
Most wanted
- #5409 Rename `cosmwasm/core`2 reactions · 2 comments
- #5488 Withdraw pending1 reaction · 1 comment
Rates come from the 17 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: Apache-2.0 · 2 deps checked · 0 potential conflicts.