projectcalico/calico

Maintenance

Active

Human commits, 30 days

355

Human commits, 90 days

1.2k

Human commits, 365 days

4.3k

Bot share of commits, 365 days

0%

Last commit

Nov 11, 2026 (16 hours ago)

Last human commit

Nov 11, 2026 (16 hours ago)

Authors, 90 days

18

Last release

Nov 11, 2026 (18 hours ago)

Median PR merge time

6 hours

Responsiveness: of 29 recent issues, 76% got a maintainer reply. Median first response: 6 hours.

• Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
• Authors in the last 90 days are counted from the sampled commits only.

Sources: Commits, Releases, Merged pull requests, Issues

People

Owner

Organization

Commits sampled

100 since Nov 12, 2025

Authors for half of commits

3

Authors for 80% of commits

7

Contributors

282

Top committers

• caseydavenport: 22% of commits
• alexh-tigera: 16% of commits
• nelljerram: 15% of commits
• tomastigera: 11% of commits
• lwr20: 8% of commits

• Shares come from the newest sampled commits, since the commit sample is capped.

Sources: Commits, Contributors

Stars

Organic, confidence medium

Anyone can buy stars for any repo; bursts alone don't prove the owner did.

• The star history looks organic.
• Star history from the full report of Oct 25, 2026; this update did not re-read it.

Sources: How star history is analyzed

Risk

Flags

• Warning: The latest release of the Go package github.com/projectcalico/calico was published more than 24 months ago, while the repository has had 4,347 human commits in the last year (deps.dev); the old release has 6 known security advisories (GHSA-5r5h-q934-cccp, GHSA-6362-gv4m-53ww, GHSA-9394-xfq9-6qrp), which do not show whether the current code is affected. Details

License

Now

Apache-2.0 (OSI-approved)

A year ago

Apache-2.0 (OSI-approved)

Packages

• github.com/projectcalico/calico (GO): latest v3.21.1+incompatible, published Nov 24, 2021
  Advisories for the latest version: GHSA-5r5h-q934-cccp (high), GHSA-6362-gv4m-53ww (high), GHSA-9394-xfq9-6qrp (moderate), GHSA-9p7w-w5q6-mxj3 (moderate), GHSA-m67g-87rx-v42c (moderate), GO-2024-2801 (unknown)

Package and advisory data: deps.dev and OSV.

OpenSSF Scorecard: 6.2 out of 10 (via deps.dev).

Sources: GitHub: projectcalico/calico, deps.dev: Go github.com/projectcalico/calico, OSV: GHSA-5r5h-q934-cccp, OSV: GHSA-6362-gv4m-53ww, OSV: GHSA-9394-xfq9-6qrp, OSV: GHSA-9p7w-w5q6-mxj3, OSV: GHSA-m67g-87rx-v42c, OSV: GO-2024-2801