vinta/pangu.js
Opinionated paranoid text spacing in JavaScript, with on-device AI semantic judgment
4.9k stars · 319 forks · TypeScript
Caution
Caution: one person wrote most of the recent commits.
Why
- One person wrote 100% of human commits in the last year, so the project depends on them continuing. (source 1, source 2)
What would change this
- A second person takes a substantial share of commits.
- Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.; Authors in the last 90 days are counted from the sampled commits only.; Only 0 recent issues can be checked for a response, too few to measure response time.)
Maintenance
PartialActive
- Human commits, 30 days
- 209
- Human commits, 90 days
- 1.1k
- Human commits, 365 days
- 1.1k
- Bot share of commits, 365 days
- 0%
- Last commit
- Oct 12, 2026 (2 days ago)
- Last human commit
- Oct 12, 2026 (2 days ago)
- Authors, 90 days
- 1
- Last release
- none found
- Median PR merge time
- 1 hour
Responsiveness: of 0 recent issues, n/a got a maintainer reply. Median first response: n/a.
- Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
- Authors in the last 90 days are counted from the sampled commits only.
- Only 0 recent issues can be checked for a response, too few to measure response time.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Personal account
- Commits sampled
- 499 since Oct 15, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 1
- Contributors
- 28
Top committers
- vinta: 100% of commits
- Shares come from the newest sampled commits, since the commit sample is capped.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence medium
Bursts
- Dec 13, 2018 to Dec 14, 2018: about 25 more stars than usual, peak 17 in one day, a spike that tapers off. We couldn't check for an outside explanation.
- 39 stars on a repo created before February 2013 have no date, so they aren't in the chart.
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
- 39 stars on the creation day are undated (before 2013-02-10) and are not counted.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- MIT (OSI-approved)
- A year ago
- MIT (OSI-approved)
Packages
- pangu (NPM): latest 10.4.1, published Sep 26, 2026
Advisories for the latest version: none listed
Package and advisory data: deps.dev and OSV.
OpenSSF Scorecard: 5.6 out of 10 (via deps.dev).
Sources: GitHub: vinta/pangu.js, deps.dev: npm pangu
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/vinta/pangu.js)Earlier verdicts
- Oct 15, 2026: Caution
- Oct 14, 2026: Caution
Computed 6 hours ago · method 2026.10.2