jashkenas/underscore
JavaScript's utility _ belt
27.3k stars · 5.4k forks · JavaScript
Caution
Caution: one person wrote most of the recent commits.
Why
- One person wrote 81% of human commits in the last year, so the project depends on them continuing. (source 1, source 2)
What would change this
- A second person takes a substantial share of commits.
Maintenance
CompleteActive
- Human commits, 30 days
- 7
- Human commits, 90 days
- 11
- Human commits, 365 days
- 47
- Bot share of commits, 365 days
- 0%
- Last commit
- Sep 28, 2026 (16 days ago)
- Last human commit
- Sep 28, 2026 (16 days ago)
- Authors, 90 days
- 4
- Last release
- none found
- Median PR merge time
- 25 hours
Responsiveness: of 0 recent issues, n/a got a maintainer reply. Median first response: n/a.
- Only 0 recent issues can be checked for a response, too few to measure response time.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Personal account
- Commits sampled
- 47 since Oct 14, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 1
- Contributors
- 265
Top committers
- jgonggrijp: 81% of commits
- dkempner: 6% of commits
- Chanakyasinde: 4% of commits
- jakezwang: 4% of commits
- 123xiaode456-boop: 2% of commits
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- May 21, 2015 to May 22, 2015: about 70 more stars than usual, peak 62 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jan 27, 2023 to Jan 29, 2023: about 56 more stars than usual, peak 26 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- 1.9k stars on a repo created before February 2013 have no date, so they aren't in the chart.
- 1 stars GitHub has since removed (tracked since Oct 14, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
- 1871 stars on the creation day are undated (before 2013-02-10) and are not counted.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- MIT (OSI-approved)
- A year ago
- MIT (OSI-approved)
Packages
- underscore (NPM): latest 1.13.8, published Feb 19, 2026
Advisories for the latest version: none listed
Package and advisory data: deps.dev and OSV.
OpenSSF Scorecard: 6.1 out of 10 (via deps.dev).
Sources: GitHub: jashkenas/underscore, deps.dev: npm underscore
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/jashkenas/underscore)Earlier verdicts
- Oct 14, 2026: Caution
- Oct 14, 2026: Caution
Computed 9 hours ago · method 2026.10.2