YMFE/yapi
YApi 是一个可本地部署的、打通前后端及QA的、可视化的接口管理平台
27.7k stars · 4.8k forks · JavaScript
Avoid
Avoid: no human commits in a year, and most questions go unanswered.
Why
- No human commits since November 2022, and only 0 of 17 recent issues got a maintainer reply. (source 1, source 2, source 3, source 4)
- The latest version of npm package yapi-vendor has 1 high-severity security advisory (GHSA-663h-2vr3-ghrj). (source 1, source 2, source 3)
What would change this
- A release or merged commit from a maintainer, or replies to recent issues.
- The latest version is patched or the advisory is withdrawn.
Maintenance
CompleteDormant
- Human commits, 30 days
- 0
- Human commits, 90 days
- 0
- Human commits, 365 days
- 0
- Bot share of commits, 365 days
- 0%
- Last commit
- Nov 1, 2022 (3 years ago)
- Last human commit
- Nov 1, 2022 (3 years ago)
- Authors, 90 days
- 0
- Last release
- Jul 9, 2021 (5 years ago)
- Median PR merge time
- 37 days
Responsiveness: of 17 recent issues, 0% got a maintainer reply. Median first response: n/a.
- No human commits in 365 days, and most issues go unanswered.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 100 since Mar 10, 2020
- Authors for half of commits
- 3
- Authors for 80% of commits
- 16
- Contributors
- 76
Top committers
- ariesly15: 21% of commits
- hellosean1025: 18% of commits
- aweleey: 13% of commits
- 苏文雄: 10% of commits
- tangcent: 4% of commits
- No human commits in the last 365 days, so shares use the newest 100 commits back to 2020-03-10T12:27:09Z.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- Oct 8, 2017 to Oct 17, 2017: about 167 more stars than usual, peak 31 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Nov 5, 2017 to Nov 7, 2017: about 73 more stars than usual, peak 44 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jan 22, 2018 to Jan 26, 2018: about 97 more stars than usual, peak 49 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Apr 10, 2018 to Apr 12, 2018: about 132 more stars than usual, peak 64 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jul 18, 2018 to Jul 19, 2018: about 59 more stars than usual, peak 43 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Sep 25, 2018 to Sep 27, 2018: about 151 more stars than usual, peak 80 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Jan 22, 2019 to Jan 23, 2019: about 87 more stars than usual, peak 83 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Apr 8, 2019 to Apr 11, 2019: about 440 more stars than usual, peak 191 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jul 10, 2021 to Jul 12, 2021: about 128 more stars than usual, peak 85 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests, a new release.
- 2 stars GitHub has since removed (tracked since Oct 14, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
Sources: How star history is analyzed
Risk
CompleteFlags
- High: OSV, via deps.dev, lists GHSA-663h-2vr3-ghrj at HIGH severity on the latest version of yapi-vendor. Details
- Info: The OpenSSF Scorecard for this project is 3.5 out of 10 (deps.dev). Details
License
- Now
- Apache-2.0 (OSI-approved)
- A year ago
- Apache-2.0 (OSI-approved)
Packages
- yapi-vendor (NPM): latest 1.12.0, published Nov 1, 2022
Advisories for the latest version: GHSA-663h-2vr3-ghrj (high)
Package and advisory data: deps.dev and OSV.
OpenSSF Scorecard: 3.5 out of 10 (via deps.dev).
Sources: GitHub: YMFE/yapi, deps.dev: npm yapi-vendor, OSV: GHSA-663h-2vr3-ghrj
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/YMFE/yapi)Earlier verdicts
- Oct 14, 2026: Avoid
- Oct 14, 2026: Avoid
Computed 9 hours ago · method 2026.10.2