yarnpkg/yarn
The 1.x line is frozen - features and bugfixes now happen on https://github.com/yarnpkg/berry
41.5k stars · 2.7k forks · JavaScript
Healthy
Healthy: no known risks in the checks that ran.
Why
No rule fired.
What would change this
- Partly checked: people (Only 1 human commits were found, too few to judge who maintains the project.)
- A dormant maintenance status, a deprecated or archived package, a successor link, or a critical advisory would change this.
Maintenance
CompleteSteady
- Human commits, 30 days
- 0
- Human commits, 90 days
- 0
- Human commits, 365 days
- 1
- Bot share of commits, 365 days
- 0%
- Last commit
- Feb 12, 2026 (8 months ago)
- Last human commit
- Feb 12, 2026 (8 months ago)
- Authors, 90 days
- 0
- Last release
- Mar 9, 2024 (2 years ago)
- Median PR merge time
- 2 days
Responsiveness: of 0 recent issues, n/a got a maintainer reply. Median first response: n/a.
- Only 0 recent issues can be checked for a response, too few to measure response time.
Sources: Commits, Releases, Merged pull requests, Issues
People
Partial- Owner
- Organization
- Commits sampled
- 1 since Oct 14, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 1
- Contributors
- 438
Top committers
- Daniel15: 100% of commits
- Only 1 human commits were found, too few to judge who maintains the project.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- Jan 24, 2019 to Jan 25, 2019: about 81 more stars than usual, peak 64 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- The star history was reset at some point, so earlier stars aren't counted.
- 3 stars GitHub has since removed (tracked since Oct 14, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
- The star history has a zero run of 26 weeks or more, so the analysis starts after it.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- BSD-2-Clause (OSI-approved)
- A year ago
- BSD-2-Clause (OSI-approved)
Packages
- yarn (NPM): latest 1.22.22, published Mar 9, 2024
Advisories for the latest version: none listed
Package and advisory data: deps.dev and OSV.
OpenSSF Scorecard: 4.2 out of 10 (via deps.dev).
Sources: GitHub: yarnpkg/yarn, deps.dev: npm yarn
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/yarnpkg/yarn)Earlier verdicts
- Oct 14, 2026: Healthy
- Oct 14, 2026: Healthy
- Oct 13, 2026: Healthy
Computed 15 hours ago · method 2026.10.2