{"source":"https://contributable.vercel.app","licence":"CC BY 4.0","methodology":"https://contributable.vercel.app/methodology","v":2,"owner":"OWASP","name":"threat-dragon","updatedAt":"2026-10-11T05:38:43.779Z","coveredSince":"2025-10-04T15:12:59.731Z","facts":{"owner":"OWASP","name":"threat-dragon","description":"An open source threat modeling tool from OWASP","stars":1638,"forks":408,"archived":false,"isFork":false,"license":"Apache-2.0","defaultBranch":"main","pushedAt":"2026-10-07T12:37:57Z","createdAt":"2020-06-02T12:37:47Z","topics":["threat-modeling","sdlc","owasp","owasp-threat-dragon","threat-dragon"],"languages":{"JavaScript":1561452,"Vue":232724,"Shell":41119,"Dockerfile":4520,"HTML":1188,"SCSS":648},"frameworks":[],"commits90d":244,"releases365d":5,"lastReleaseAt":"2026-05-10T20:30:07Z","gettingStarted":{"contributing":false,"codeOfConduct":true,"issueTemplates":true,"devcontainer":false,"cla":"none","channels":[{"kind":"slack","url":"https://owasp.org/slack/invite"}],"policy":null}},"metrics":{"computedAt":"2026-10-11T05:38:43.779Z","outsidePulls":{"cohort":{"n":11,"merged":4,"closedUnmerged":7,"open":0,"mergeRate":0.36363636363636365,"openShare":0,"evidence":{"merged":[1864,1818,1766,1761],"closedUnmerged":[1832,1824,1797,1783,1763,1762,1756],"open":[]}},"firstTimers":{"n":11,"merged":4,"closedUnmerged":7,"open":0,"mergeRate":0.36363636363636365,"openShare":0,"evidence":{"merged":[1864,1818,1766,1761],"closedUnmerged":[1832,1824,1797,1783,1763,1762,1756],"open":[]}},"year":{"n":25,"merged":7,"closedUnmerged":18,"open":0,"mergeRate":0.28,"openShare":0,"evidence":{"merged":[1864,1818,1766,1761,1414,1397,1372],"closedUnmerged":[1832,1824,1797,1783,1763,1762,1756,1611,1512,1498,1485,1425,1420,1416,1403,1391,1382,1376],"open":[]}}},"pullFirstResponse":{"n":11,"answered":11,"waiting":0,"medianHours":1.9969444444444444,"p75Hours":4.045833333333333,"within48h":0.9090909090909091,"within7d":0.9090909090909091,"curve":[{"hours":0.035277777777777776,"waiting":0.9090909090909091},{"hours":0.06388888888888888,"waiting":0.8181818181818181},{"hours":0.44,"waiting":0.7272727272727272},{"hours":0.8369444444444445,"waiting":0.6363636363636362},{"hours":1.7033333333333334,"waiting":0.5454545454545454},{"hours":1.9969444444444444,"waiting":0.45454545454545453},{"hours":2.118888888888889,"waiting":0.36363636363636365},{"hours":3.2444444444444445,"waiting":0.2727272727272727},{"hours":4.045833333333333,"waiting":0.18181818181818182},{"hours":14.959444444444445,"waiting":0.09090909090909091},{"hours":259.6141666666667,"waiting":0}],"evidence":{"answered":[1864,1832,1824,1818,1797,1783,1766,1763,1762,1761,1756],"waiting":[]}},"timeToMerge":{"n":11,"merged":4,"medianHours":null,"evidence":[1864,1818,1766,1761]},"issueFirstResponse":{"n":15,"answered":8,"waiting":7,"medianHours":369.51166666666666,"p75Hours":null,"within48h":0.19999999999999996,"within7d":0.33333333333333326,"curve":[{"hours":0.08638888888888889,"waiting":0.9333333333333333},{"hours":0.19277777777777777,"waiting":0.8666666666666667},{"hours":10.2375,"waiting":0.8},{"hours":81.24055555555556,"waiting":0.7333333333333334},{"hours":106.13583333333334,"waiting":0.6666666666666667},{"hours":183.41416666666666,"waiting":0.6000000000000001},{"hours":350.65555555555557,"waiting":0.5333333333333334},{"hours":369.51166666666666,"waiting":0.4666666666666668}],"evidence":{"answered":[1841,1830,1823,1782,1777,1753,1751,1749],"waiting":[1860,1859,1791,1789,1750,1733,1732]}},"starter":{"counts":{"available":0,"claimed":2,"in-progress":0,"stale":0},"helpWantedAvailable":1,"issues":[{"n":1549,"title":"Automation: Trivy misreporting in housekeeping","state":"claimed","label":"beginner","createdAt":"2026-04-10T07:23:33Z","updatedAt":"2026-07-03T09:58:04Z"},{"n":1530,"title":"Feature: provide quick-start guide for new users","state":"claimed","label":"beginner","createdAt":"2026-04-01T14:01:23Z","updatedAt":"2026-08-20T06:10:07Z"},{"n":1128,"title":"Cannot select \"inner\" trust boundary object when boundary objects are nested","state":"stale","label":"help-wanted","createdAt":"2024-11-14T14:04:08Z","updatedAt":"2026-05-28T09:11:17Z"},{"n":972,"title":"Two undo/redo methods do not join up","state":"stale","label":"help-wanted","createdAt":"2024-06-03T09:46:37Z","updatedAt":"2026-05-28T09:11:38Z"},{"n":962,"title":"Translate to Farsi","state":"available","label":"help-wanted","createdAt":"2024-05-22T06:15:21Z","updatedAt":"2026-09-17T06:58:38Z"},{"n":639,"title":"Use RAAML for threat models","state":"stale","label":"help-wanted","createdAt":"2023-04-11T16:13:48Z","updatedAt":"2026-03-14T07:03:06Z"},{"n":607,"title":"Support for more granular threats using threat trees","state":"stale","label":"help-wanted","createdAt":"2023-02-16T20:33:25Z","updatedAt":"2026-03-15T07:05:45Z"},{"n":458,"title":"View multiple diagrams","state":"stale","label":"help-wanted","createdAt":"2022-07-11T14:13:47Z","updatedAt":"2025-01-25T07:01:24Z"},{"n":361,"title":"MITRE Att&ck integration with STRIDE threats","state":"stale","label":"help-wanted","createdAt":"2022-02-04T16:33:41Z","updatedAt":"2026-04-22T13:39:32Z"}]},"responseWindow":{"hours":[1,5,2,4,2,1,2,0,0,1,0,1,0,0,0,3,2,0,0,0,0,0,0,0,0,0,0,0,0,3,2,0,1,0,0,0,0,3,3,3,2,0,0,0,3,1,0,0,0,0,10,9,8,1,1,5,5,0,0,1,6,27,7,0,1,0,1,0,1,0,0,0,0,0,0,8,8,0,0,0,0,0,0,0,3,2,1,0,2,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,2,1,9,3,5,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,0,0,0,1,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,1,1,0,0,0,0,0,0,0,0,1,8,3,5,0,1],"people":7,"replies":198},"activeMaintainers":10},"series":[{"week":"2025-10-12","opened":0,"merged":0,"answered7d":0,"activity":5},{"week":"2025-10-19","opened":0,"merged":0,"answered7d":0,"activity":8},{"week":"2025-10-26","opened":1,"merged":1,"answered7d":1,"activity":9},{"week":"2025-11-02","opened":1,"merged":0,"answered7d":1,"activity":3},{"week":"2025-11-09","opened":1,"merged":0,"answered7d":1,"activity":18},{"week":"2025-11-16","opened":0,"merged":0,"answered7d":0,"activity":14},{"week":"2025-11-23","opened":1,"merged":0,"answered7d":1,"activity":18},{"week":"2025-11-30","opened":1,"merged":1,"answered7d":1,"activity":8},{"week":"2025-12-07","opened":1,"merged":0,"answered7d":1,"activity":14},{"week":"2025-12-14","opened":2,"merged":1,"answered7d":1,"activity":37},{"week":"2025-12-21","opened":0,"merged":0,"answered7d":0,"activity":4},{"week":"2025-12-28","opened":2,"merged":0,"answered7d":2,"activity":14},{"week":"2026-01-04","opened":0,"merged":0,"answered7d":0,"activity":9},{"week":"2026-01-11","opened":0,"merged":0,"answered7d":0,"activity":21},{"week":"2026-01-18","opened":0,"merged":0,"answered7d":0,"activity":14},{"week":"2026-01-25","opened":0,"merged":0,"answered7d":0,"activity":11},{"week":"2026-02-01","opened":0,"merged":0,"answered7d":0,"activity":5},{"week":"2026-02-08","opened":0,"merged":0,"answered7d":0,"activity":3},{"week":"2026-02-15","opened":0,"merged":0,"answered7d":0,"activity":14},{"week":"2026-02-22","opened":0,"merged":0,"answered7d":0,"activity":20},{"week":"2026-03-01","opened":0,"merged":0,"answered7d":0,"activity":22},{"week":"2026-03-08","opened":1,"merged":0,"answered7d":1,"activity":13},{"week":"2026-03-15","opened":2,"merged":0,"answered7d":2,"activity":42},{"week":"2026-03-22","opened":0,"merged":0,"answered7d":0,"activity":15},{"week":"2026-03-29","opened":0,"merged":0,"answered7d":0,"activity":16},{"week":"2026-04-05","opened":0,"merged":0,"answered7d":0,"activity":34},{"week":"2026-04-12","opened":0,"merged":0,"answered7d":0,"activity":30},{"week":"2026-04-19","opened":0,"merged":0,"answered7d":0,"activity":46},{"week":"2026-04-26","opened":1,"merged":0,"answered7d":1,"activity":16},{"week":"2026-05-03","opened":0,"merged":0,"answered7d":0,"activity":33},{"week":"2026-05-10","opened":0,"merged":0,"answered7d":0,"activity":44},{"week":"2026-05-17","opened":0,"merged":0,"answered7d":0,"activity":21},{"week":"2026-05-24","opened":0,"merged":0,"answered7d":0,"activity":31},{"week":"2026-05-31","opened":0,"merged":0,"answered7d":0,"activity":57},{"week":"2026-06-07","opened":0,"merged":0,"answered7d":0,"activity":42},{"week":"2026-06-14","opened":0,"merged":0,"answered7d":0,"activity":58},{"week":"2026-06-21","opened":2,"merged":1,"answered7d":1,"activity":10},{"week":"2026-06-28","opened":2,"merged":0,"answered7d":2,"activity":22},{"week":"2026-07-05","opened":1,"merged":1,"answered7d":1,"activity":11},{"week":"2026-07-12","opened":0,"merged":0,"answered7d":0,"activity":19},{"week":"2026-07-19","opened":1,"merged":0,"answered7d":1,"activity":7},{"week":"2026-07-26","opened":1,"merged":0,"answered7d":1,"activity":73},{"week":"2026-08-02","opened":0,"merged":0,"answered7d":0,"activity":8},{"week":"2026-08-09","opened":1,"merged":1,"answered7d":1,"activity":37},{"week":"2026-08-16","opened":1,"merged":0,"answered7d":1,"activity":8},{"week":"2026-08-23","opened":1,"merged":0,"answered7d":1,"activity":24},{"week":"2026-08-30","opened":0,"merged":0,"answered7d":0,"activity":26},{"week":"2026-09-06","opened":1,"merged":1,"answered7d":1,"activity":20},{"week":"2026-09-13","opened":2,"merged":0,"answered7d":2,"activity":24},{"week":"2026-09-20","opened":3,"merged":1,"answered7d":3,"activity":10},{"week":"2026-09-27","opened":2,"merged":0,"answered7d":1,"activity":16},{"week":"2026-10-04","opened":2,"merged":0,"answered7d":0,"activity":10}],"trend":{"flag":"unknown","recentMedianHours":34.11972222222222,"previousMedianHours":null,"recentN":9,"previousN":3,"openedThisWeek":2,"openedLastWeek":2},"programs":[{"program":"gsoc","slug":"owasp-foundation","name":"OWASP Foundation","years":[2024,2025,2026]}]}