upstash / context7
Repository health
Security, maintenance, dependencies and license for upstash/context7.
Security
62 dependencies checked (12 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 7.1/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: MIT10/10
- Tests run on pull requestsCI configured + tests present10/10
- Automated dependency updatesDependabot configured10/10
- Security policySECURITY.md present10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesOnly 0/22 actions pinned to SHAs2/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 11 of 21 external pull requests merged (61% of those decided), median 0.1 days to merge.From the 58 most recently updated pull requests, bots excluded.
Recent releases
- mcpb-v4.4.419 Oct 2026 · same day as previous
- mcpb-v4.4.319 Oct 2026 · same day as previous
- ctx7@0.8.119 Oct 2026 · same day as previous
- @upstash/context7-mcp@4.4.419 Oct 2026 · same day as previous
- @upstash/context7-mcp@4.4.319 Oct 2026 · 3 days after previous
Pull requests
- Open
- 10
- 0 stale (60+ days, no update in 30)
- Merged
- 16
- of the 30 latest
- Median time to merge
- 1 day
- From bots
- 18
- not listed below
Open
- #3395 CTX7-1846: Helm deployment docs pageenesgules · opened 10 days ago
- #3508 fix(cli): keep JSONC comments when writing MCP configsjayfeng7 · opened 1 day ago
- #3506 fix(cli): order prerelease versions per semver in the update checkjayfeng7 · opened 1 day ago
Recently merged
- #3517 CTX7-3290: Admin MCP icons, server card and a smaller docs7_list_sitesenesgules · merged 22 Oct 2026
- #3516 CTX7-3290: Put scopes_supported back in the Admin MCP resource metadataenesgules · merged 22 Oct 2026
- #3514 CTX7-3290: Landing page for the Admin MCP, and serve only public/enesgules · merged 22 Oct 2026
- #3512 CTX7-3290: Read-only Docs7 agents and library suggestions in the Admin MCPenesgules · merged 22 Oct 2026
- #3486 CTX7-3290: Add Context7 Admin MCP serverenesgules · merged 22 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- enesgules41 commits · 61%
- ramazanoacar9 commits · 13%
- fahreddinozcan6 commits · 9%
- Mohit-25-tech2 commits · 3%
- skovranek1 commit · 1%
Of the 67 most recent commits.
Issues
- Open
- 48
- issues and pull requests, as GitHub counts them
- Median time to close
- 1 day
- from 29 closed of the 39 latest
- Awaiting first reply
- 6
- of 10 open among the 39 latest
- Oldest open
- 1.5 years
Most wanted
- #3501 Add library form rejects valid GitHub URLs (“Please enter a URL”)1 reaction · 0 comments
Rates come from the 39 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: MIT · 12 deps checked · 0 potential conflicts.