OWASP/pytm
A Pythonic framework for threat modeling
In plain words
Outside PRs: 7 in 10 merged. First reply usually within 2.3 days. 1 starter issue is available now.
Outside PRs merged
69%
9 merged, 4 closed, 4 still open
Higher than 26% of 559 other measured repositories
First human reply
2.3 days
median of 17 outside PRs, 0 unanswered
Outside PRs opened 30 to 120 days ago, so each has had time to be answered. A figure needs at least 5 pull requests, otherwise it reads "Not enough data". How this is calculated · A number looks wrong?
Your first steps here
If you have never contributed to this project, do these in order.
- 1
Read the contributing guide
It says how to set the project up and what the maintainers expect in a pull request.
Open the guide - 2
Take this free issue
Initial TM creation is a pain and requires a lot of typing
Open issue #12 - 3
Know where to ask
Questions go to the project's mailing list, or on the issue itself. Not in private messages.
Open it - 4
Open a small pull request
Link the issue in it. A first reply here usually takes 2.3 days; until then, silence is normal.
What happens to an outside pull request
Every pull request opened by someone outside the core team, 30 to 120 days ago.
- Opened by outsiders17100%
- Got a human reply17100%
- Merged953%
Time to first reply
After 2 days, 12% of outside PRs had a reply from a person. After a week, 71%. Bots do not count.
The last 52 weeks
Outside pull requests opened each week, and how many of them have been merged.
Starter issues
Issues labelled for beginners, with their real state. Available means open, unassigned, no linked pull request, nobody has claimed it in the last 14 days, and it was updated in the last 60 days.
- Available
- 1
- Claimed
- 0
- Has a pull request
- 0
- Stale
- 2
- StaleDS01: Weak credential storage - condition too broad#27
- AvailableInitial TM creation is a pain and requires a lot of typing#12
- StaleDF1 threat assumes source and sink are remote systems#9
Issue replies: first human reply in Not enough data (median of 3 issues).
How to start
- Contributing guidefound
- Code of conductnot found
- Issue templatesnot found
- Dev container for one-step setupfound
- No CLA or sign-off requirement was found.
Where the project talks
Activity
- Commits, 90 days
- 18
- Releases, 12 months
- 1
- Active maintainers
- 3
- Last push
- 5 Oct 2026
Stack
Badge and feed
Two ways to use these figures outside this page.
For maintainers: a README badge
Shows newcomers how quickly this project answers and how often it merges. Paste the line into your README; the badge updates with the index.
[](https://contributable.vercel.app/repo/OWASP/pytm)[](https://contributable.vercel.app/repo/OWASP/pytm)For contributors: follow new issues
Add the feed to a feed reader (Feedly, Inoreader, Thunderbird) and you hear about new free starter issues here without checking the site.
https://contributable.vercel.app/feed/repo/OWASP/pytmFor developers: every figure on this page as JSON at /api/v1/repos/OWASP/pytm.
Similar repositories
Same main language (Python), most shared frameworks and topics first, then the faster reply.
GA4GH Variation Representation Python Implementation
- First reply
- 2 h
