ytdl-org / youtube-dl
Repository health
Security, maintenance, dependencies and license for ytdl-org/youtube-dl.
Security
Dependencies were not checked for known security issues, because RepoPilot found no dependency manifest it can read. That does not mean they are safe. Inspect its manifests on GitHub ↗
OpenSSF Scorecard · 4.5/10
Checks sorted from strongest to weakest.
- No risky CI workflowsNo dangerous workflow patterns detected10/10
- Least-privilege CI tokensGitHub workflow tokens follow principle of least privilege10/10
- No binaries in the repositoryNo binaries found in the repo10/10
- License fileLicense file detected10/10
- Signed releases5 out of the last 5 releases have a total of 5 signed artifacts.8/10
- Code review before mergeFound 1/3 approved changesets3/10
- Recent activity0 commits and 0 issue activity found in the last 90 days0/10
- OpenSSF best-practices badgeNo effort to earn an OpenSSF best practices badge detected0/10
- Pinned dependenciesDependency not pinned by hash detected0/10
- Security policySecurity policy file not detected0/10
- Fuzz testingProject is not fuzzed0/10
- Branch protectionBranch protection not enabled on development/release branches0/10
- Static analysis on commitsSAST tool is not run on all commits0/10
- Published through a build pipelinePackaging workflow not detectednot scored
Maintenance
Outside contributions: 10 of 100 external pull requests merged (17% of those decided), median 6 days to merge.From the 100 most recently updated pull requests, bots excluded.
Recent releases
- 2021.12.1716 Dec 2021 · 194 days after previous
- 2021.06.065 Jun 2021 · 20 days after previous
- 2021.05.1616 May 2021 · 21 days after previous
- 2021.04.2625 Apr 2021 · 9 days after previous
- 2021.04.1716 Apr 2021 · 10 days after previous
Pull requests
- Open
- 21
- 18 stale (60+ days, no update in 30)
- Merged
- 1
- of the 30 latest
- Median time to merge
- 16 days
- From bots
- 0
- not listed below
Open
- #33293 [youtube] Add `visionos` client to fix the endless 403s on downloadBOplaid · opened 81 days ago
- #33288 Fix case-sensitivity bugs when handling uppercase file extensionsaoright · opened 115 days ago
- #33297 Fix/reddit 403 blockedAshish-Minj1290 · opened 35 days ago
- #31003 [DoodStream] Add extractor from yt-dlp back-portdirkf · opened 4.4 years ago
- #33234 [infomaniak] Add VOD2 embed extractorhwang-cadent · opened 311 days ago
Recently merged
- #32725 [XFileShare] Update for 2024 with new InfoExtractor features dirkf · merged 8 Mar 2024
The 30 most recently updated pull requests.
Top contributors
- dirkf100 commits · 100%
Of the 100 most recent commits.
Issues
- Open
- 4,123
- issues and pull requests, as GitHub counts them
- Median time to close
- 2 days
- from 41 closed of the 71 latest
- Awaiting first reply
- 0
- of 30 open among the 71 latest
- Oldest open
- 16.0 years
Most wanted
- #31530 [YouTube] Unable to extract uploader id1,538 reactions · 635 comments
- #31585 New Release?105 reactions · 122 comments
- #30919 [ARTE.tv] Unable to download JSON metadata14 reactions · 16 comments
Rates come from the 71 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.