Ecosyste.ms: Issues
An open API service for providing issue and pull request metadata for open source projects.
GitHub / step-security-bot issue stats
Total issues: 86
Total pull requests: 1,011
Merged pull request: 563
Average time to close issues: 4 months
Average time to close pull requests: 7 days
Average comments per issue: 0.28
Average comments per pull request: 0.54
Issues created
- janheinrichmerker/action-github-changelog-generator: 2
- fjogeleit/http-request-action: 1
- marocchino/sticky-pull-request-comment: 1
- controlplaneio/kubesec-action: 1
- trmcnvn/firefox-addon: 1
- srggrs/assign-one-project-github-action: 1
- actions-cool/verify-package-version: 1
- ocular-d/json-linter: 1
- wearerequired/git-mirror-action: 1
- visiky/dingtalk-release-notify: 1
- actions-cool/issues-similarity-analysis: 1
- actions-cool/maintain-one-comment: 1
- superfly/flyctl-actions: 1
- actions-cool/verify-files-modify: 1
- iyu/actions-milestone: 1
- CycloneDX/gh-gomod-generate-sbom: 1
- devbotsxyz/xcode-notarize: 1
- subosito/flutter-action: 1
- hmarr/auto-approve-action: 1
- montudor/action-zip: 1
- perl-actions/install-with-cpanm: 1
- ataylorme/eslint-annotate-action: 1
- abinoda/slack-action: 1
- dawidd6/action-homebrew-bump-formula: 1
- babel/actions: 1
- lumaxis/shellcheck-problem-matchers: 1
- ibiqlik/action-yamllint: 1
- erlef/setup-beam: 1
- devbotsxyz/xcode-staple: 1
- crazy-max/ghaction-dump-context: 1
- codacy/codacy-coverage-reporter-action: 1
- cisagov/setup-env-github-action: 1
- cachix/install-nix-action: 1
- bufbuild/buf-push-action: 1
- actions-cool/pr-welcome: 1
- actions-cool/pr-check-fill: 1
- actions-cool/check-user-permission: 1
- kubernetes-sigs/kubebuilder-release-tools: 1
- actions-cool/check-pr-ci: 1
- gregsdennis/dependencies-action: 1
- ilammy/setup-nasm: 1
- articulate/actions-markdownlint: 1
- JasonEtco/create-an-issue: 1
- ad-m/github-push-action: 1
- JustinBeckwith/linkinator-action: 1
- pre-commit/action: 1
- juliangruber/sleep-action: 1
- crazy-max/ghaction-chocolatey: 1
- crazy-max/ghaction-github-status: 1
- actions-cool/issues-helper: 1
- repo-sync/pull-request: 1
- ChrisCarini/intellij-platform-plugin-verifier-action: 1
- JakePartusch/wait-for-netlify-action: 1
- nick-fields/retry: 1
- eps1lon/actions-label-merge-conflict: 1
- pozil/auto-assign-issue: 1
- peter-evans/create-or-update-comment: 1
- jwalton/gh-docker-logs: 1
- tonybaloney/pycharm-security: 1
- ComunidadAylas/PackSquash-action: 1
- heinrichreimer/action-github-changelog-generator: 1
- tim-actions/commit-message-checker-with-regex: 1
- trufflesecurity/trufflehog: 1
- haskell/actions: 1
- treosh/lighthouse-ci-action: 1
- Jtalk/url-health-check-action: 1
- andymckay/cancel-action: 1
- a7ul/tar-action: 1
- TimonVS/pr-labeler-action: 1
- Roang-zero1/github-create-release-action: 1
- balchua/microk8s-actions: 1
- actions-rs/audit-check: 1
- Azure/docker-login: 1
- hecrj/setup-rust-action: 1
- AButler/upload-release-assets: 1
- webfactory/ssh-agent: 1
- Azure/setup-kubectl: 1
- actions-cool/release-helper: 1
- shogo82148/actions-goveralls: 1
- mattnotmitt/doxygen-action: 1
- aquasecurity/tfsec-sarif-action: 1
- actions-rs/cargo: 1
- Apple-Actions/import-codesign-certs: 1
- n1hility/cancel-previous-runs: 1
- ilammy/msvc-dev-cmd: 1
Pull requests created
- step-security/secure-repo: 219
- varunsh-coder/setup-php: 65
- step-security/github-actions-goat: 20
- ihub-pub/libs: 20
- microsoft/qcodes: 19
- visulima/visulima: 15
- anolilab/javascript-style-guide: 13
- mozilla/neqo: 11
- microsoft/component-detection: 10
- jmertic/landscape-tools: 10
- shortlink-org/shortlink: 9
- sagikazarmark/todobackend-go-kit: 9
- helmholtz-analytics/heat: 7
- inventage/web-components: 7
- opfab/operatorfabric-core: 7
- nest/nest-simulator: 7
- exeme-project/exeme-lang: 6
- tommens/calculator-cucumber: 6
- Hack23/cia: 6
- unicode-org/icu4x: 6
- google/zerocopy: 5
- intel/dffml: 5
- Workday/canvas-kit: 5
- chipsec/chipsec: 5
- V0ldek/rsonpath: 5
- Azure/azure-mobile-apps: 5
- ecos-umons/TimerStopwatch: 4
- intel/pcm: 4
- evemonk/eve_online: 4
- reidhoch/oeis-seq: 4
- elide-dev/elide: 4
- apache/santuario-xml-security-java: 4
- pzaino/thecrowler: 4
- microsoft/DirectXMath: 4
- apache/directory-kerby: 4
- GoogleCloudPlatform/functions-framework-dotnet: 4
- nodenv/node-build: 4
- laoshanxi/app-mesh: 4
- konstruktoid/ansible-role-hardening: 4
- evemonk/omniauth-eve_online-sso: 3
- defstream/kickable-rs: 3
- statnett/controller-runtime-viper: 3
- glevv/obscure_stats: 3
- electron/electron: 3
- ossf/allstar: 3
- koviubi56/mylog: 3
- ducktors/turborepo-remote-cache: 3
- Thomasjkeel/jsmetrics: 3
- h0x0er/ossinspector: 3
- step-security/agent: 3
- microsoft/bpf_performance: 2
- AppacYazilim/zamanejs: 2
- google/automotive-design-compose: 2
- timescale/timescaledb: 2
- fmtlib/fmt: 2
- letsblockit/letsblockit: 2
- NixOS/amis: 2
- aws-powertools/powertools-lambda-typescript: 2
- iqzaardiansyah/e-shop: 2
- deislabs/ratify: 2
- rubygems/rubygems: 2
- R533-Code/colt-cpp: 2
- lindell/multi-gitter: 2
- apache/commons-pool: 2
- microsoft/UVAtlas: 2
- apache/commons-jxpath: 2
- microsoft/DirectXTex: 2
- apache/commons-skin: 2
- microsoft/DirectXTK: 2
- jmertic/lf-landscape: 2
- in-toto/go-witness: 2
- celo-org/celo-monorepo: 2
- open-amt-cloud-toolkit/ui-toolkit-angular: 2
- microsoft/rust_fallible_vec: 2
- google/capslock: 2
- apache/sedona: 2
- faker-js/faker: 2
- gaphor/generic: 2
- nwesterhausen/overseers-manual-df: 2
- nam20485/OdbDesign: 2
- GoogleCloudPlatform/functions-framework-python: 2
- pzaino/MicroFB: 2
- nuxt/nuxt: 2
- open-amt-cloud-toolkit/ui-toolkit-react: 2
- UlisesGascon/simple-api: 2
- GitTools/GitVersion: 2
- apache/commons-build-plugin: 2
- open-policy-agent/cert-controller: 2
- apache/commons-dbutils: 2
- jmertic/contrib_check: 2
- donkirkby/live-py-plugin: 2
- NodeSecure/scanner: 2
- microsoft/vsts-extension-retrospectives: 2
- GoogleCloudPlatform/functions-framework-nodejs: 2
- microsoft/FX11: 2
- stevecheckoway/squoosh: 2
- Permify/permify: 2
- material-foundation/flutter-packages: 2
- GoogleCloudPlatform/functions-framework-ruby: 2
- NodeSecure/js-x-ray: 2
- nodejs/node-addon-api: 2
- sparklemotion/nokogiri: 2
- apache/commons-crypto: 2
- GoogleCloudPlatform/functions-framework-go: 2
- microsoft/DirectXTK12: 2
- GoogleCloudPlatform/functions-framework-java: 2
- nodejs/diagnostics: 2
- apache/commons-cli: 2
- open-policy-agent/gatekeeper: 2
- apache/cloudstack-terraform-provider: 2
- iovisor/ubpf: 2
- apache/commons-csv: 2
- GoogleCloudPlatform/functions-framework-php: 2
- kumahq/kuma: 2
- sozercan/aikit: 2
- apache/commons-codec: 2
- erooster-mail/erooster: 2
- finos/FDC3: 2
- authelia/authelia: 2
- NodeSecure/size-satisfies: 1
- fugue-project/fugue: 1
- aperturerobotics/bifrost: 1
- JSPaste/Frontend: 1
- flutter/gallery: 1
- One-Language/One: 1
- koviubi56/flake8-forelse: 1
- Ousret/charset_normalizer: 1
- microsoft/usersim: 1
- scovetta/disclosure-check: 1
- eclipse-platform/eclipse.platform.swt.binaries: 1
- MyUnisoft/httpie: 1
- raffis/mongodb-query-exporter: 1
- PowerShell/PowerShell: 1
- bytemare/hash: 1
- intel/ittapi: 1
- smartcontractkit/chainlink: 1
- NodeSecure/documentation-ui: 1
- citadel-core/app-manager: 1
- apache/commons-vfs: 1
- ruby/rdoc: 1
- orcasound/orcasite: 1
- apache/commons-digester: 1
- Ouranosinc/xclim: 1
- orcasound/orcanode-monitor: 1
- devops-actions/variable-substitution: 1
- oneapi-src/oneDNN: 1
- koviubi56/bcdb: 1
- xmldom/xmldom: 1
- skiffos/skiff-core: 1
- apache/whimsy: 1
- lucacome/draft-release: 1
- nodejs/nodejs.org: 1
- lf-energy/lfenergy-landscape: 1
- Azure/acr-builder: 1
- pydot/pydot: 1
- muir/nflex: 1
- cezmunsta/ssh_ms: 1
- google/budoux: 1
- Azure/azure-cli: 1
- Payback159/openfero: 1
- Jbranadev/JBRestAPI: 1
- serilog-contrib/serilog-sinks-elasticsearch: 1
- sigstore/sigstore-python: 1
- apache/commons-net: 1
- hynek/structlog: 1
- nodejs/citgm: 1
- NodeSecure/vis-network: 1
- eclipse-openj9/build-openj9: 1
- liblouis/liblouis: 1
- microsoft/SdnDiagnostics: 1
- coveo/plasma: 1
- ajeetdsouza/zoxide: 1
- konstruktoid/hardened-images: 1
- AlexandreDecan/sismic: 1
- eclipse-platform/eclipse.platform.text: 1
- BimantoroW/tutorial-1: 1
- google/jni-bind: 1
- coliff/dark-mode-switch: 1
- jmertic/artwork-template: 1
- apache/commons-text: 1
- domdfcoding/domdf_python_tools: 1
- erocarrera/pefile: 1
- NodeSecure/cli: 1
- flanksource/incident-commander: 1
- cjrh/deadpool: 1
- apache/commons-collections: 1
- fraxken/jsdoc-extractor: 1
- cilium/pwru: 1
- rsadsb/dump1090_rs: 1
- anchore/sbom-action: 1
- devops-actions/issue-comment-tag: 1
- BensenHsu/editorjs-tooltip: 1
- lburgazzoli/camel-go: 1
- Flick-Kit/Huddle: 1
- NatLibFi/Annif: 1
- wcampbell0x2a/backhand: 1
- reidhoch/horcrux: 1
- Intel-bigdata/HiBench: 1
- apache/commons-dbcp: 1
- kommitters/stellar_base: 1
- kommitters/stellar_sdk: 1
- hynek/argon2-cffi-bindings: 1
- webauthn-open-source/fido2-lib: 1
- apache/commons-scxml: 1
- uwu-tools/magex: 1
- timescale/pgspot: 1
- PowerShell/PowerShell-Docker: 1
- kommitters/editorjs-tooltip: 1
- IntelPython/dpnp: 1
- gaphor/gaphor_plugin_helloworld: 1
- Azure/kubernetes-kms: 1
- LycheeOrg/Lychee: 1
- MariaDB4j/MariaDB4j: 1
- SolidInvoice/SolidInvoice: 1
- mcornick/mpg: 1
- openvinotoolkit/geti-sdk: 1
- kommitters/editorjs-inline-image: 1
- project-copacetic/copacetic: 1
- halkeye/gatsby-theme-nodeschool: 1
- sandialabs/reverse_argparse: 1
- eclipse-platform/eclipse.platform.common: 1
- open-amt-cloud-toolkit/mps-router: 1
- ts-graphviz/ts-graphviz: 1
- jasonkarns/bats-mock: 1
- kommitters/tickspot.js: 1
- NodeSecure/ci: 1
- apache/commons-jcs: 1
- apache/commons-release-plugin: 1
- fleetdm/fleet: 1
- sozercan/kubectl-ai: 1
- NodeSecure/flags: 1
- theparanoids/pam-ysshca: 1
- TotallyInformation/node-red-contrib-uibuilder: 1
- bank-vaults/vault-sdk: 1
- microsoft/ebpf-for-windows: 1
- NodeSecure/ci-action: 1
- koviubi56/pypbar: 1
- ericcornelissen/webmangler: 1
- data-engineering-collective/minimalkv: 1
- mrtc0/aws-sso-go: 1
- defenseunicorns/pepr: 1
- eclipse-platform/eclipse.platform: 1
- NodeSecure/estree-ast-utils: 1
- jaandrle/nodejsscript: 1
- rikhall1515/nextjs-project-template: 1
- bats-core/bats-core: 1
- apache/cxf-fediz: 1
- NodeSecure/sec-literal: 1
- dashlog/core: 1
- aperturerobotics/starpc: 1
- muir/nfigure: 1
- NodeSecure/rc: 1
- pilinux/gorest: 1
- ampproject/amphtml: 1
- ceph/ceph-csi: 1
- nginxinc/nginx-kubernetes-gateway: 1
- open-amt-cloud-toolkit/ui-toolkit: 1
- coliff/bootstrap-ie11: 1
- nginxinc/nginx-prometheus-exporter: 1
- tachyons-css/react-native-style-tachyons: 1
- gaphor/gaphas: 1
- aperturerobotics/controllerbus: 1
- NodeSecure/vulnera: 1
- ada-url/ada: 1
- daohoangson/flutter_widget_from_html: 1
- koviubi56/lemming: 1
- apache/commons-compress: 1
- apache/cloudstack-www: 1
- google/libphonenumber: 1
- open-policy-agent/gatekeeper-external-data-provider: 1
- StackExchange/dnscontrol: 1
- heutelbeck/sapl-policy-engine: 1
- apache/commons-daemon: 1
- dashlog/fetch-github-repositories: 1
- onebeyond/systemic-knex: 1
- NodeSecure/fs-walk: 1
- sigstore/cosign-installer: 1
- byllyfish/shellous: 1
- jakartaee/common-annotations-api: 1
- MyUnisoft/tsd: 1
- DataDog/gohai: 1
- IntelRealSense/librealsense: 1
- NodeSecure/utils: 1
- INRIA/spoon: 1
- apache/commons-configuration: 1
- locationtech/geomesa: 1
- Azure/azure-workload-identity: 1
- aperturerobotics/util: 1
- cdimascio/express-openapi-validator: 1
- microsoft/openjdk-docker: 1
- wallies/action-netlify-deploy: 1
- NodeSecure/i18n: 1
- hynek/argon2-cffi: 1
- eruvanos/openbrokerapi: 1
- kubernetes-sigs/azurefile-csi-driver: 1
- step-security/harden-runner: 1
- Darkflame72/asyncpixel: 1
- jakebailey/hereby: 1
- NodeSecure/domain-check: 1
- eclipse/transformer: 1
- intel/userspace-cni-network-plugin: 1
- konstruktoid/hardening: 1
- konstruktoid/container-alpine-build: 1
- mozilla/rhino: 1
- wcampbell0x2a/asterix-rs: 1
- case-contract-testing/contract-case: 1
- NodeSecure/npm-registry-sdk: 1
- byllyfish/finsy: 1
- GoogleCloudPlatform/synthetics-sdk-nodejs: 1
- hughsie/libxmlb: 1
- inikulin/parse5: 1
- muir/libschema: 1
- openfga/openfga: 1
- mcornick/clilol: 1
- fraxken/IteratorMatcher: 1
- NodeSecure/authors: 1
- coliff/freshdesk-messaging-facade: 1
- pendulum-project/ntpd-rs: 1
- intel-retail/rtsf-at-checkout-reference-design: 1
- javamodules/javamodules.dev: 1
- statnett/image-scanner-operator: 1
- nwesterhausen/dfraw_json_parser: 1
- jakartaee/authentication: 1
- Payback159/tenama: 1
- kommitters/editorjs-drag-drop: 1
- nodejs/llhttp: 1
- byllyfish/exacl: 1
- apache/commons-logging: 1
- microcks/microcks: 1
- zntrio/butcher: 1
- fraxken/dep-updater: 1
- rajbos-actions/variable-substitution: 1
- kubernetes-sigs/secrets-store-csi-driver: 1
- eclipse-platform/eclipse.platform.swt: 1
- apache/commons-jexl: 1
- apache/commons-fileupload: 1
- morganstanley/desktopJS: 1
- apache/commons-exec: 1
- microsoft/teams-ai: 1
- peap/git-global: 1
- nodejs/undici: 1
- AOMediaCodec/libavif: 1
- konstruktoid/ansible-role-docker-rootless: 1
- fraxken/publish-preview: 1
- devops-actions/json-to-file: 1
- One-Language/Website: 1
- microsoft/CLRInstrumentationEngine: 1
- apache/commons-jci: 1
- apache/commons-imaging: 1
- NodeSecure/github: 1
- goyek/goyek: 1
- in-toto/witness: 1
- konstruktoid/ssh-moduli: 1
- devops-actions/load-used-actions: 1
- apache/cloudstack-cloudmonkey: 1
- newrelic/newrelic-ruby-agent: 1
- NodeSecure/ossf-scorecard-sdk: 1
- repo-helper/repo_helper: 1
- eclipse-platform/eclipse.platform.ui: 1
- aws/amazon-braket-sdk-python: 1
- muir/nchi: 1
- NodeSecure/licenses-conformance: 1
- intel/intel-extension-for-transformers: 1
- gagoar/codeowners-generator: 1
- Azure/secrets-store-csi-driver-provider-azure: 1
- prisma/prisma: 1
- fraxken/combine-async-iterators: 1
- Kapiche/vue-segment-analytics: 1
- kommitters/editorjs-break-line: 1
- jakartaee/authorization: 1
- scikit-hep/pyhf: 1
- apache/commons-ognl: 1
- jakartaee/expression-language: 1
- fraxken/FrequencySet: 1
- gofrs/uuid: 1
- apache/commons-validator: 1
- kommitters/kadena.ex: 1
- Azure/azure-cli-extensions: 1
- sunt-programator/eleventy-plugin-mathjax: 1
- DNSCrypt/dnscrypt-proxy: 1
- morganstanley/ComposeUI: 1
- ruby/rake: 1
- Azure/eraser: 1
- openmeterio/openmeter: 1
- prometheus/prometheus: 1
- apache/commons-rdf: 1
- One-Language/Document: 1
- licensee/licensee: 1
- kommitters/editorjs-undo: 1
- NodeSecure/gitlab: 1
- DonyaOS/Donya: 1
- devops-actions/load-runner-info: 1
- konstruktoid/action-pylint: 1
- muir/nvelope: 1
- intel-retail/automated-vending: 1
- Kapiche/cobertura-action: 1
- moov-io/ach: 1
- jksolbakken/linkfollower: 1
- jauderho/dive: 1
- gradle-dependency-analyze/gradle-dependency-analyze: 1
- v7labs/darwin-py: 1
- jakartaee/cdi-tck: 1
- jakartaee/inject: 1
- Ars-Linguistica/mlconjug3: 1
- open-policy-agent/frameworks: 1
Maintainer
Active Maintainer
Issue Author Associations
- None (86, 100.00%)
Pull Request Author Associations
- Contributor (651, 64.39%)
- Collaborator (284, 28.09%)
- None (76, 7.52%)
Top Issue Labels
- help wanted (2)
- enhancement (1)
- good first issue (1)
- lifecycle/frozen (1)
- priority/important-soon (1)
- jira-issue (1)
Top Pull Request Labels
- knowledge-base (219)
- maintenance (15)
- dependencies (13)
- enhancement (7)
- T: Maintenance (7)
- released (7)
- I: No breaking change (7)
- security (6)
- type:ci (6)
- S: Normal (5)
- stale (5)
- CI (4)
- size/L (4)
- chore (4)
- 5 min review (3)