Fast, portable and reliable dependency analysis for any codebase. Supports license & vulnerability scanning for large monoliths. Language-agnostic; integrates with 20+ build systems.
active 2024-12-14 → 2026-08-10 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 605 days from 2024-12-14 to 2026-08-10. Pushes: 501 total, peak 20 in a day. Pull requests: 123 total, peak 5 in a day. Issues: 9 total, peak 2 in a day. Comments: 215 total, peak 28 in a day. Stars: 97 total, peak 6 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| spatten | 223 | 148 | 27 | 22 |
| zlav | 144 | 105 | 18 | 13 |
| coderabbitai[bot] | 123 | 0 | 0 | 73 |
| csasarak | 91 | 22 | 11 | 35 |
| james-fossa | 66 | 44 | 11 | 4 |
| ryanlink | 59 | 47 | 6 | 6 |
| nficca | 52 | 28 | 8 | 6 |
| jssblck | 49 | 16 | 8 | 10 |
| tjugdev | 46 | 29 | 9 | 5 |
| CortezFrazierJr | 30 | 4 | 0 | 14 |
| gilfaizon | 18 | 9 | 3 | 4 |
| jagonalez | 17 | 15 | 1 | 1 |
| saramaebee | 13 | 5 | 7 | 1 |
| github-actions[bot] | 11 | 0 | 0 | 9 |
| dependabot[bot] | 7 | 1 | 4 | 2 |
| Conor-FOSSA | 6 | 6 | 0 | 0 |
| GauravB159 | 4 | 3 | 0 | 1 |
| ghosted213 | 4 | 0 | 1 | 0 |
| chad-fossa | 4 | 2 | 0 | 2 |
| evrardjp | 3 | 0 | 0 | 2 |
Recent activity
Latest issues, pull requests and releases
- Pull request#1739csasarak2026-08-07 17:09
- Issue#944github-actions[bot]2026-07-05 00:39[Feature Request] Report Attribution CSV format
- Issue comment#1070github-actions[bot]2026-07-05 00:39Fossa-cli can't handle npm aliases
- Issue#1065github-actions[bot]2026-07-02 00:46how can I skip the "Gradle Plugin" scan
- Issue comment#1065github-actions[bot]2026-07-02 00:46how can I skip the "Gradle Plugin" scan
- Issue comment#1307github-actions[bot]2026-07-01 00:49[BUG]fossa cannot analyze the new format of `pnpm-lock.yaml`
- Issue comment#1702dependabot[bot]2026-05-26 21:57Bump rustls-webpki from 0.103.3 to 0.103.13
- Issue comment#1702zlav2026-05-26 21:55Bump rustls-webpki from 0.103.3 to 0.103.13
- Pull request#1715nficca2026-05-20 20:36
- Pull request#1710spatten2026-05-12 23:19
- Issue comment#1703coderabbitai[bot]2026-05-06 22:54ANE-1036: Glob file matching for exclusion filters in .fossa.yml
- Pull request#1703zlav2026-04-24 20:29
- Pull request#1701zlav2026-04-23 19:59
- Pull request#1697zlav2026-04-17 20:27
- Pull request#1695tjugdev2026-04-15 22:18
- Issue comment#1694coderabbitai[bot]2026-04-15 01:06[ANE-2809] Add NuGet Central Package Management (CPM) support
- Issue comment#1693zlav2026-04-14 23:15[ANE-1624] Preserve gem name and version for GIT deps in Gemfile.lock
- Pull request#1693zlav2026-04-14 23:02
- Issue comment#1688nficca2026-04-10 19:05[ANE-2900] Omit unset fields from project edit request body
- Issue comment#1687coderabbitai[bot]2026-04-09 23:40Add cryptographic algorithm scanning and CycloneDX 1.7 CBOM output
- Pull request#1686archy-rock3t-cloud2026-04-09 18:17
- Pull request#1684zlav2026-04-08 18:56
- Pull request#1683zlav2026-04-03 18:28
- Issue comment#1682coderabbitai[bot]2026-04-03 17:15[ANE-2886] Handle missing version field in uv.lock editable packages
- Pull request#1682zlav2026-04-02 22:25
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 97 stars here means stars gained during the window, not the repo's star count.