k3s-io/k3s
Lightweight Kubernetes
34.2k stars · 2.8k forks · Go
Caution
Caution: the published package has not been released in two years.
Why
- The Go package github.com/k3s-io/k3s has had no release since August 2019, while the repository has 460 human commits in the last year; the old release has 4 known security advisories (GHSA-jxr7-mqhw-9p98, GHSA-m4hf-6vgr-75r2, GO-2025-3646), which do not show whether the current code is affected. (source 1, source 2, source 3, source 4, source 5, source 6)
What would change this
- A new package release is published.
- Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.)
Maintenance
PartialActive
- Human commits, 30 days
- 38
- Human commits, 90 days
- 117
- Human commits, 365 days
- 460
- Bot share of commits, 365 days
- 14%
- Last commit
- Oct 13, 2026 (1 day ago)
- Last human commit
- Oct 13, 2026 (1 day ago)
- Authors, 90 days
- 29
- Last release
- Sep 30, 2026 (14 days ago)
- Median PR merge time
- 19 hours
Responsiveness: of 18 recent issues, 61% got a maintainer reply. Median first response: 3 hours.
- Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 431 since Oct 14, 2025
- Authors for half of commits
- 2
- Authors for 80% of commits
- 7
- Contributors
- 314
Top committers
- brandond: 42% of commits
- dereknola: 13% of commits
- rafaelbreno: 7% of commits
- manuelbuil: 7% of commits
- mgfritch: 6% of commits
- Shares come from the newest sampled commits, since the commit sample is capped.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- Sep 26, 2018 to Oct 2, 2018: about 472 more stars than usual, peak 230 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Dec 20, 2018 to Dec 21, 2018: about 16 more stars than usual, peak 10 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
- Feb 3, 2019 to Feb 11, 2019: about 157 more stars than usual, peak 41 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Feb 26, 2019 to Mar 20, 2019: about 3.9k more stars than usual, peak 1.1k in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
- Nov 19, 2019 to Nov 27, 2019: about 552 more stars than usual, peak 154 in one day, a shape we can't classify. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jul 27, 2023 to Jul 28, 2023: about 134 more stars than usual, peak 99 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Aug 1, 2023 to Aug 3, 2023: about 81 more stars than usual, peak 48 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- 1 stars GitHub has since removed (tracked since Oct 14, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
Sources: How star history is analyzed
Risk
CompleteFlags
- Warning: The latest release of the Go package github.com/k3s-io/k3s was published more than 24 months ago, while the repository has had 460 human commits in the last year (deps.dev); the old release has 4 known security advisories (GHSA-jxr7-mqhw-9p98, GHSA-m4hf-6vgr-75r2, GO-2025-3646), which do not show whether the current code is affected. Details
License
- Now
- Apache-2.0 (OSI-approved)
- A year ago
- Apache-2.0 (OSI-approved)
Packages
- github.com/k3s-io/k3s (GO): latest v0.8.1, published Aug 20, 2019
Advisories for the latest version: GHSA-jxr7-mqhw-9p98 (moderate), GHSA-m4hf-6vgr-75r2 (high), GO-2025-3646 (unknown), GO-2026-5973 (unknown)
Package and advisory data: deps.dev and OSV.
OpenSSF Scorecard: 8.5 out of 10 (via deps.dev).
Sources: GitHub: k3s-io/k3s, deps.dev: Go github.com/k3s-io/k3s, OSV: GHSA-jxr7-mqhw-9p98, OSV: GHSA-m4hf-6vgr-75r2, OSV: GO-2025-3646, OSV: GO-2026-5973
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/k3s-io/k3s)Earlier verdicts
- Oct 14, 2026: Caution
- Oct 14, 2026: Caution
Computed 12 hours ago · method 2026.10.2