RepoPilot

warpdotdev / warp

Search warpdotdev/warp

GitHub

Repository health

Security, maintenance, dependencies and license for warpdotdev/warp.

Security

Dependencies were not checked for known security issues, because RepoPilot found no dependency manifest it can read. That does not mean they are safe. Inspect its manifests on GitHub ↗

Security checks (RepoPilot estimate) · 5.1/10

OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.

  • Recent activityLast commit 0d ago10/10
  • Tests run on pull requestsCI configured + tests present10/10
  • Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
  • License fileLicense: AGPL-3.08/10
  • Pinned dependencies167/168 actions pinned to SHAs6/10
  • Code review before mergeOnly 2/20 recent PRs had requested reviewers2/10
  • Automated dependency updatesNo Dependabot or Renovate config found0/10
  • Security policyNo SECURITY.md found0/10
  • Static analysis on commitsNo SAST workflow detected0/10
  • Branch protectionInsufficient permissions to read branch protectionnot scored

Maintenance

23 Oct 2026
Last commit
active
100+
Commits in the last year
171
Contributors
all time · 30 in the last 86 commits
v0.2026.06.09.19.54.dev_00
Latest release
~1d cadence

Outside contributions: 3 of 48 external pull requests merged (33% of those decided), median 2.7 days to merge.From the 56 most recently updated pull requests, bots excluded.

Recent releases

Pull requests

Open
22
0 stale (60+ days, no update in 30)
Merged
7
of the 30 latest
Median time to merge
Same day
From bots
10
not listed below

Open

Recently merged

The 30 most recently updated pull requests.

Top contributors

Of the 86 most recent commits.

Issues

Open
5,480
issues and pull requests, as GitHub counts them
Median time to close
4 days
from 4 closed of the 32 latest
Awaiting first reply
0
of 28 open among the 32 latest
Oldest open
5.3 years

Most wanted

Rates come from the 32 most recently updated issues; the open count and oldest issue cover the whole repository.

Dependencies

Checked packages and import counts

These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.

Not checked
Packages checked
Unknown
External imports
outside packages the code imports

License

AGPL-3.0
License
Strong copyleft (network)
Family
Unknown
License conflicts in dependencies
Dependency licenses were not checked
Commercial use: AGPL extends copyleft to network/hosted use — shipping it in a SaaS can require releasing your source. Review carefully before commercial use.