ngmi / chainguard-dev / melange

chainguard-dev/melange

Go 566 stars

build APKs from source code

✓ Synced 1h ago Share on X →
README badge: [![ngmi](https://ngmi.review/badge/chainguard-dev/melange.svg)](https://ngmi.review/repo/chainguard-dev/melange)
1.6k Merged PRs
2 days Avg Merge Time
0m Fastest PR
5 months Slowest PR
#896 Global Speed Rank
Trim top 0% outliers

Trends Over Time

Monthly aggregates for this repo. The gap between avg and median reveals outlier skew.

PR size over time (lines changed)
Review time over time (hrs)
Changes requested rate over time (%)
Merged PRs per month
Time to first review (hrs)
Unreviewed merge rate (%)

PR Size Analysis

Lines changed (additions + deletions) vs review outcomes.

PRs by size
Avg review time (hrs)
Clean approval rate (%)

Top Reviewers

#1 @imjasonh
@imjasonh
391 reviews ✓ 278 approved
#2 @k4leung4
@k4leung4
278 reviews ✓ 259 approved
#3 @kaniini
@kaniini
266 reviews ✓ 177 approved ↺ 5 blocked
#4 @egibs
@egibs
172 reviews ✓ 113 approved
#5 @89luca89
@89luca89
146 reviews ✓ 49 approved ↺ 10 blocked
#6
@jonjohnsonjr
126 reviews ✓ 85 approved
#7
@luhring
116 reviews ✓ 67 approved
#8 @jdolitsky
@jdolitsky
105 reviews ✓ 77 approved ↺ 2 blocked
#9
@smoser
105 reviews ✓ 26 approved ↺ 9 blocked
#10 @xnox
@xnox
87 reviews ✓ 39 approved ↺ 6 blocked

Recent Merged PRs

# Title Author Time Reviews Blocks
#2363 build(deps): bump github.com/google/go-containerregistry from 0.20.7 to 0.21.0 @dependabot 3 days 2 ✓
#2367 build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 @dependabot 20.7h 1 ✓
#2364 build(deps): bump github.com/github/go-spdx/v2 from 2.3.6 to 2.4.0 @dependabot 3 days 1 ✓
#2366 build(deps): bump the gomod group across 1 directory with 3 updates @dependabot 20.7h 1 ✓
#2348 Fix typo in LINTER.md from 'disable' to 'disabled' @eminaktas 7 days 1 ✓
#2365 Use namespace instead of ReleaseData for SBOM generation. @wlynch 2.8h 3 ✓
#2361 fix(maven): use symlink instead of settings.xml for cache localRepository @toabctl 4.5h 1 ✓
#2351 license-check: also consider license-paths from the config @sil2100 4 days 3 ✓
#2360 build(deps): bump chainguard.dev/apko from 1.1.8 to 1.1.9 in the gomod group @dependabot 45m 1 ✓
#2359 build(deps): bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 @dependabot 16m 1 ✓
#2358 build(deps): bump github.com/pjbgf/sha1cd from 0.4.0 to 0.5.0 @dependabot 16.6h 1 ✓
#2355 feat: Support multiple --env-file options @dannf 20.7h 2 ✓
#2349 feat(config): point CARGO_HOME to /var/cache/melange/cargo @toabctl 2 days 1 ✓
#2350 license-check: add distinctive deep/shallow modes of license scanning @sil2100 2 days 2 ✓
#2357 tarball: switch from crypto/sha1 to sha1cd @xnox 11.4h 1 ✓
#2326 better sbom @xnox 14 days 2 ✓
#2346 fix: simplify QEMU machine config and reduce boot overhead @89luca89 5 days 1 ✓
#2354 build(deps): bump chainguard.dev/apko from 1.1.7 to 1.1.8 in the gomod group @dependabot 16m 1 ✓
#2347 chore: run dependabot daily @egibs 2 days 2 ✓
#2352 build(deps): bump the gomod group with 2 updates @dependabot 20.8h 1 ✓