PAGES
← all tools
◆ Threat Intelligence

World Monitor

v2.11.7 open-source

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface

Summary

World Monitor is an open-source, free real-time intelligence dashboard, run as a hosted web app at worldmonitor.app, that scores geopolitical pressure across 29 tracked hotspots and layers it against shipping chokepoints, military flights, and infrastructure proximity to show whether that pressure can reach supply or trade routes. It targets analysts and traders who need geopolitical signal tied to market regime rather than a general news reader, and its own materials describe it less as a feed aggregator than as a correlation layer sitting between country-risk scoring and macro data like rates, FX and crypto. Paid tiers add an AI analyst chat, scenario modelling and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. access for AI clients, while the free tier covers 57 of its 58 map layers. Development is active, with thousands of commits in the past year and a release 25 days ago.

Real-time global intelligence dashboard. AI-powered news aggregation, geopolitical monitoring, and infrastructure tracking in a unified situational awareness interface

How World Monitor helps

Which countries are becoming more exposed to supply shocks, and why?

scores each country on a resilience index built from dimensions like food stocks-to-use ratios, mineral production and processing shares, and education, and flags which dimension moved and which source (USDA, USGS, BGS) drove it

Is a story actually happening or just being repeated by one outlet?

cross-checks a story against other independent sources and surfaces whether the coverage corroborates or collapses to a single origin, naming the cause when coverage collapses

Which companies have had a material development I should know about?

runs bounded scans across a watched portfolio, classifies incoming evidence for material impact, and admits only the items that clear that bar rather than every mention

Is today's market move tied to the news, or unrelated?

correlates news volume against market returns in the same panel so a spike in one can be checked against a move in the other

What is the current state of a specific conflict, trade flow, or resource chokepoint?

pulls dedicated monitoring surfaces (military/defense industrial activity, WTO trade flows, commodity and FX panels) into one dashboard rather than requiring separate lookups

Can an agent pull this intelligence into its own workflow without a manual dashboard visit?

exposes the underlying data — story corroboration, trade flows, dashboard controls — as MCP tools an agent can query directly, listing the available tools without requiring a key

all 31 features, with the evidence for each →

Languages

English, Arabic, Bulgarian, Chinese (Simplified), Chinese (Traditional), Croatian, Czech, Dutch, French, German, Greek, Hebrew, Hindi, Hungarian, Italian, Japanese, Korean, Persian, Polish, Portuguese, Romanian, Russian, Spanish, Swedish, Thai, Turkish, Ukrainian, Vietnamese Interface: English, Arabic, Bulgarian, Chinese (Simplified), Chinese (Traditional), Croatian, Czech, Dutch, French, German, Greek, Hindi, Hungarian, Italian, Japanese, Korean, Persian, Polish, Portuguese, Romanian, Russian, Spanish, Swedish, Thai, Turkish, Ukrainian, Vietnamese · Documentation: Chinese (Simplified), Japanese, Russian · Release notes: English, Arabic, Chinese (Simplified), Chinese (Traditional), Czech, German, Greek, Hebrew, Italian, Japanese, Korean, Russian, Spanish, Thai, Turkish, Vietnamese Chinese (Traditional), German added in v2.10.0 (Sep 8, 2026) · English, Hebrew, Korean added in v2.5.21 (Mar 1, 2026) · English, Czech, Hebrew, Italian, Korean, Spanish added in v2.5.23 (Mar 1, 2026) · Greek added in v2.5.9 (Feb 26, 2026) · Greek added in v2.5.7 (Feb 25, 2026)

Features

31 capabilities · 2 backed by code, an API document or a real run

Built from World Monitor's releases, docs, README and our own runs. “Seen” marks the month we first spotted a release the vendor didn't date. Group names and tags are our labels.

Compare with peers →

What World Monitor offers you

  • Command-line interface2
  • ML-based detection2
  • REST API1
All capabilities 31 capabilities
CLI interface verified Provides a command-line interface with configurable options including MCP endpoint URL, request timeout, raw response output, reconciliation directory, and version reporting. 9 releases · 8 other sources · first seen Feb 2026

Also counts toward: Command-line interface

release 9 total

  • MCP spoken answers now support Arabic by setting spoken_language to "ar".⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ v2.11.7 · Nov 2026 · source · release history
  • The /api/fwdstart endpoint and the unused tech/finance variant FEEDS have been removed — any client calling /api/fwdstart will break. v2.11.7 · Nov 2026 · source · release history
  • Introduces a tiered edge cache with a configurable degraded-response policy in the gateway v2.5.20 · Feb 2026 · source · release history
  • Adds negative-result caching logic to the cachedFetchJson function v2.5.20 · Feb 2026 · source · release history
  • Converts 52 API endpoints from POST to GET to enable Cloudflare edge caching v2.5.20 · Feb 2026 · source · release history
  • Adds Upstash Redis shared caching with cache key contamination fixes for faster panel loads v2.5.5 · Feb 2026 · source · release history

command line 7 total

  • --hosted — , `--port <n>`, `--no-open`, `--url <url>` — `web` only; other v2.11.1 · Oct 2026 · command-line history
  • --check — write nothing; exit 1 if either catalogue differs from this script's output v2.11.0 · Oct 2026 · command-line history
  • --help — / `-v, --version` v2.10.0 · Aug 2026 · command-line history
  • --mcp-url — MCP endpoint (default `https://worldmonitor.app/mcp`) v2.10.0 · Aug 2026 · command-line history
  • --timeout — request timeout (default 30000) v2.10.0 · Aug 2026 · command-line history
  • --reconciliation-directory v2.10.0 · Aug 2026 · command-line history

example

  • Enable negative-result caching for API calls where the result might be empty or null. const data = await cachedFetchJson(url, { cacheNegative: true }); v2.5.20 · Feb 2026 · source
Interactive geospatial mapping shipped Provides an interactive world map with zoom, pan, hover effects, and distinct overlay layers for geopolitical, military, and infrastructure data. 14 releases · 1 other source · first seen Feb 2026

release 14 total

  • Classifies and admits material impacts in company monitoring. v2.10.0 · Sep 2026 · source · release history
  • feat(map): Native mobile map experience with location detection and full feature parity v2.5.21 · Mar 2026 · source · release history
  • feat: Add GPS/GNSS jamming map layer + CII integration v2.5.21 · Mar 2026 · source · release history
  • Adds an interactive world map using D3.js Natural Earth projection with zoom, pan, and regional focus views v1.0.0 · Feb 2026 · source · release history
  • Introduces a conflict zones overlay for regions like Ukraine, Myanmar, and Sudan v1.0.0 · Feb 2026 · source · release history
  • Enables clicking any country on the map to view AI-generated intelligence briefs, including geo-based military counts, stock market indices, and hover highlight loading feedback. v2.1.0 · Feb 2026 · source · release history

example

  • Enable the visual layer to see country labels and dynamic counters on the map. In the Map UI, toggle on 'Country Labels Layer' in the layers menu. v1.5.0 · Feb 2026 · source
AI-driven intelligence scoring and classification shipped Uses AI to classify news items, generate country instability scores, detect focal points, and prioritize insights based on urgency and convergence. 11 releases · first seen Feb 2026

Also counts toward: ML-based detection

release 11 total

  • Adds live scoring for Iran–GCC tension pairs over a rolling 168-hour window in the tensions module.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ v2.11.4 · Oct 2026 · source · release history
  • Introduces a redesigned AI Insights Panel with prioritization and click-to-summarize functionality v2.0.0 · Feb 2026 · source · release history
  • Adds Geographic Convergence Detection to identify clustered signals across multiple data sources v1.3.0 · Feb 2026 · source · release history
  • News urgency boost triggers when Information score is high v2.0.0 · Feb 2026 · source · release history
  • Focal Point Detection AI layer now correlates signals across sources v2.0.0 · Feb 2026 · source · release history
  • Deploys Correlation Engine 2.0 which adds social media sentiment analysis and AI content detection capabilities v2.2.0 · Feb 2026 · source · release history
Integrated military and aerospace monitoring shipped Tracks military assets including aircraft, naval vessels, and surges using ADS-B Exchange, ICAO hex detection, OpenSky, and Wingbits. 10 releases · first seen Feb 2026

release 10 total

  • feat(aviation): Add NOTAM closure detection via ICAO API v2.5.21 · Mar 2026 · source · release history
  • feat(military): Server-side military bases 125K + rate limiting v2.5.21 · Mar 2026 · source · release history
  • feat(aviation): Integrate AviationStack API for non-US airport delays v2.5.21 · Mar 2026 · source · release history
  • Optimizes AIS relay: backpressure queue, spatial indexing, response caching v2.5.6 · Feb 2026 · source · release history
  • Adds Military Surge Alerts for airlift surge and foreign military presence detection v1.5.0 · Feb 2026 · source · release history
  • Adds ADS-B Exchange military aircraft database support v1.3.0 · Feb 2026 · source · release history
Financial and economic data integration shipped Displays real-time market indices, stock quotes, oil analytics, and government spending data from multiple financial APIs. 8 releases · first seen Feb 2026

release 8 total

  • Adds durable scan orchestration for company monitoring. v2.10.0 · Sep 2026 · source · release history
  • Add WTO trade policy intelligence service with tariffs, flows, and barriers (#364) v2.5.9 · Feb 2026 · source · release history
  • Adds XRP (Ripple) to the crypto panel v2.5.5 · Feb 2026 · source · release history
  • Enables clicking any country on the map to view AI-generated intelligence briefs, including geo-based military counts, stock market indices, and hover highlight loading feedback. v2.1.0 · Feb 2026 · source · release history
  • Integrates markets data from Yahoo Finance with circuit breaker handling v1.0.0 · Feb 2026 · source · release history
  • Adds Finnhub integration for stock market quotes v1.3.0 · Feb 2026 · source · release history
Company and market monitoring shipped Monitors specific companies and market trends by ingesting verified social media posts, discovering startup cohorts, tracking mineral production data, and correlating news volume with financial returns. 6 releases · first seen Sep 2026

release

  • Adds bounded Exa cohort discovery for company monitoring. v2.10.0 · Sep 2026 · source · release history
  • Normalizes scoped evidence candidates in company monitoring. v2.10.0 · Sep 2026 · source · release history
  • feat(company-monitoring): ingest verified X posts for social signal monitoring v2.10.0 · Sep 2026 · source · release history
  • Adds mineral production and processing shares sourced from USGS MCS and BGS. v2.10.0 · Sep 2026 · source · release history
  • Correlates news volume with market returns in market panels. v2.10.0 · Sep 2026 · source · release history
  • Ingests verified X posts for company monitoring. v2.10.0 · Sep 2026 · source · release history
Country resilience indexing shipped Enhances the Country Resilience Index by incorporating education metrics, USDA food stock ratios, and traditional Chinese locale support for global stability assessment. 5 releases · first seen Sep 2026

release

  • Adds 11 batch-2 official food-price sources and official local prices with weekly comparisons. v2.11.7 · Nov 2026 · source · release history
  • Activates the education dimension in the Country Resilience Index, including a flag-dark education dimension. v2.10.0 · Sep 2026 · source · release history
  • Ingests USDA food stocks data and exposes stocks-to-use ratios in the Country Resilience Index. v2.10.0 · Sep 2026 · source · release history
  • feat(resilience): ingest USDA food stocks and expose stocks-to-use data source v2.10.0 · Sep 2026 · source · release history
  • Adds Traditional Chinese (zh-TW) locale support. v2.10.0 · Sep 2026 · source · release history
Tech and startup variant dashboard shipped Offers a specialized configuration for tracking tech hubs, AI readiness, startup events, and prediction markets. 4 releases · 1 other source · first seen Feb 2026

release

  • VITE_VARIANT=tech environment variable enables a separate tech/startup-focused dashboard with AI prompts, readiness panels, and Techmeme/RSS event feeds. v1.7.0 · Feb 2026 · source · release history
  • Adds VITE_VARIANT=tech environment variable to enable a tech-focused dashboard variant with isolated AI summary caching and specific panels like Tech Readiness and Tech Hubs. v2.1.0 · Feb 2026 · source · release history
  • Polymarket added to the tech variant allowlist. v1.7.0 · Feb 2026 · source · release history
  • Includes Polymarket predictions display with probability bars v1.0.0 · Feb 2026 · source · release history

example

  • Run the application in tech-focused mode to access startup-specific panels and AI prompts. VITE_VARIANT=tech node server.js v2.1.0 · Feb 2026 · source
Market data integration expansion shipped Expands financial market coverage by adding Finnhub and AV as quote providers, introducing RUB currency tracking, and enabling visual customization of stock watchlists. 4 releases · first seen Sep 2026

release

  • feat(markets): add the RUB quote table as a third FX panel tab for Russian Ruble support v2.10.0 · Sep 2026 · source · release history
  • Authorizes Finnhub and AV as a quote provider chain for markets. v2.10.0 · Sep 2026 · source · release history
  • Adds visual stock and market watchlist customization. v2.10.0 · Sep 2026 · source · release history
  • Adds the RUB quote table as a third FX panel tab in market panels. v2.10.0 · Sep 2026 · source · release history
Global intelligence dashboard shipped Provides a real-time dashboard aggregating AI-powered news, geopolitical monitoring, and infrastructure tracking across configurable site variants. 3 releases · 1 other source · first seen Feb 2026

release

  • feat(risk): Wire theater posture + breaking news into strategic risk score v2.5.21 · Mar 2026 · source · release history
  • feat: add global streaming video quality setting (#365) (#396) v2.5.9 · Feb 2026 · source · release history
  • perf defers YouTube/map initialization and staggers data loads to reduce UI blocking time v2.5.7 · Feb 2026 · source · release history

docs

  • Real-time global intelligence dashboard aggregating AI-powered news, geopolitical monitoring, and infrastructure tracking across configurable site variants.
Shareable intelligence snapshots shipped Generates automatic social media previews and allows users to share country intelligence briefs via messaging platforms. 4 releases · first seen Feb 2026

release

  • Adds a new Security Advisories panel that displays government travel alerts via RSS v2.5.20 · Feb 2026 · source · release history
  • Converts 52 API endpoints from POST to GET to enable Cloudflare edge caching v2.5.20 · Feb 2026 · source · release history
  • Enables automatic OG image generation for Twitter/social card previews of shared story snapshots v2.2.0 · Feb 2026 · source · release history
  • Introduces World Stories feature allowing shareable country intelligence snapshots via WhatsApp, Instagram, and X v2.2.0 · Feb 2026 · source · release history
Country risk querying shipped Allows users to query risk data for specific countries via the CLI. 2 releases · 1 other source · first seen Feb 2026

Also counts toward: Command-line interface

release

  • feat(cii): Integrate Iran strike events into CII scoring, country brief & timeline v2.5.21 · Mar 2026 · source · release history
  • Adds feat: universal country detection — CII scoring for all countries with expanded mapping logic v2.5.7 · Feb 2026 · source · release history

example

  • Query country risk via CLI worldmonitor risk IR --api-key wm_xxx
Verification and workflow support shipped Provides frameworks for intelligence verification and access to live streaming data sources. 3 releases · first seen Feb 2026

Also counts toward: REST API

release

  • Adds Security hardening: SSRF protection, auth gating, and token generation for infrastructure protection v2.5.7 · Feb 2026 · source · release history
  • Supports verification checklist generation based on the Bellingcat OSH framework for intelligence workflows v2.2.0 · Feb 2026 · source · release history
  • New YouTube live stream detection API endpoint added to infrastructure. v1.7.0 · Feb 2026 · source · release history
Energy and fuel price tracking shipped Displays national energy feeds and regional fuel prices, including Guatemala MEM data, within the fuel panel and country brief. 2 releases · first seen Nov 2026

release

  • Shows national energy feeds in the fuel panel and country brief. v2.11.7 · Nov 2026 · source · release history
  • Adds Guatemala MEM fuel prices to the regional energy feeds. v2.11.7 · Nov 2026 · source · release history
Live dashboard controls verified Exposes safe controls within the web MCP interface to allow real-time interaction with live dashboards. 1 release · 1 other source · first seen Sep 2026

release

  • feat(webmcp): expose safe live dashboard controls for real-time interaction v2.10.0 · Sep 2026 · source · release history

command line

  • --theme — , `--no-anim`, `--fps <n>` — dashboard only; other commands v2.11.1 · Oct 2026 · command-line history
RT live news streaming shipped Provides real-time video feeds from RT via HLS integration. 2 releases · first seen Mar 2026

release

Disaster and environmental alerting shipped Delivers real-time alerts for weather events, natural disasters, satellite fire monitoring, and temporal anomalies. 2 releases · first seen Feb 2026

release

  • Enables weather and disaster alerts via NWS API integration v1.0.0 · Feb 2026 · source · release history
  • Adds global disaster alerts via GDACS integration, real-time satellite fire monitoring via NASA FIRMS, and temporal anomaly detection service. v2.1.0 · Feb 2026 · source · release history
Defense procurement feed shipped Ingests tender and procurement data from defense and government sources, including EPADS, Georgia, and Armenia, to support tracking of military and public-sector acquisition activity. 1 release · first seen Nov 2026

release

  • Adds EPADS, Georgia, and Armenia tender sources to the procurement feed. v2.11.7 · Nov 2026 · source · release history
Aviation NOTAM ingestion shipped Ingests FAA Notice to Air Missions (NOTAM) data to support aviation situational awareness. 1 release · first seen Oct 2026

release

  • Activates seed-notam-nms on FAA production for aviation NOTAM ingestion. v2.11.4 · Oct 2026 · source · release history
Defense industrial monitoring shipped Integrates defense industrial intelligence sources to track military production and supply chain data. 1 release · first seen Sep 2026

release

  • feat(military): add defense industrial intelligence source v2.10.0 · Sep 2026 · source · release history
Interface display customization shipped Allows users to adjust global and per-panel font scaling for improved readability. 1 release · first seen Sep 2026

release

  • feat(ui): add global and per-panel font scaling for display customization v2.10.0 · Sep 2026 · source · release history
Offline prediction custody shipped Secures and manages offline prediction data within the company monitoring workflow. 1 release · first seen Sep 2026

release

  • Seals offline prediction custody in company monitoring. v2.10.0 · Sep 2026 · source · release history
OREF sirens monitoring shipped Tracks air raid sirens in Israel with Hebrew-to-English translation. 1 release · first seen Mar 2026

release

  • feat(oref): Add OREF sirens panel with Hebrew-to-English translation v2.5.21 · Mar 2026 · source · release history
Solar terminator mapping shipped Displays day/night solar status as an overlay layer on the map. 1 release · first seen Mar 2026

release

Telegram intelligence panel shipped Aggregates and displays intelligence data directly from Telegram channels. 1 release · first seen Mar 2026

release

USNI fleet tracking shipped Integrates US Naval Institute data to monitor naval fleet movements. 1 release · first seen Feb 2026

release

  • feat: integrate USNI fleet tracker and add parser tests v2.5.1 · Feb 2026 · source · release history
Local LLM summarization shipped Supports local AI models via Ollama for on-device intelligence summarization. 1 release · first seen Feb 2026

release

  • Adds Ollama (OpenAI-compatible) local LLM summarization support v2.5.0 · Feb 2026 · source · release history
AI entity enrichment shipped Uses machine learning to enrich trending data with Named Entity Recognition (NER) for improved context. 1 release · first seen Feb 2026

Also counts toward: ML-based detection

release

Batch AI processing shipped Enables simultaneous classification of multiple news events via a batch endpoint. 1 release · first seen Feb 2026

release

  • New Batch AI classification capability for news events allows processing multiple items simultaneously v2.2.0 · Feb 2026 · source · release history
Client-side text analysis shipped Performs local AI-powered text processing and classification in the browser using ONNX Runtime. 1 release · first seen Feb 2026

release

  • Enables client-side text analysis using ONNX Runtime with Flan-T5 in the browser v2.0.0 · Feb 2026 · source · release history
MCP tool discovery shipped Lists all available MCP tools without requiring an API key. 1 other source

example

  • List every MCP tool, no key needed npx worldmonitor tools

Lines in monospace are the tool's own words: help text parsed from its source, or an endpoint from its API document. Under release, a line is our summary of a dated release. Under docs, it is quoted from the tool's own documentation or website. Each links back to the source it came from.

Score card

  1. Shipping velocity releases a month, last 12 months
  2. Documentation quality release-notes rubric, 0–100
  3. Breaking-change discipline how rarely a release breaks users, and notice given
  4. Maintenance risk quiet time against its own cadence, maintainers
  5. Innovation & surface new capabilities, API and MCP surface
  6. Community health
  7. Contributor trend distinct committers, this year against last
  8. Maintainer concentration bus factor now against a year ago
  9. Issue backlog trend issues closed per issue opened, 12 months
  10. Responsiveness median time to a maintainer’s first reply

Nine scores for World Monitor, each built from the releases, notes and API history this site tracks — and, on Researcher and Business, where it stands among every measured tool in its category and how that has moved.

Score cards are part of every paid plan.

See plans →

Each score is 0–100 on a published rubric, derived from data this site already shows. A dimension we cannot measure says so — it is never scored 0 and never enters a rank.

How this is scored
  • Shipping velocity — releases a month over the last 12 months, on a log scale where 16 a month scores 100. Needs 3 releases in the window.
  • Documentation quality — the release-notes rubric published on the analytics page, unchanged.
  • Breaking-change discipline — the share of releases carrying a breaking change (none scores 100, half or more scores 0). Only projects that label breaking changes are measured: a clean record cannot be told from an unlabelled one.
  • Maintenance risk — quiet time measured against the tool's own release cadence (quiet longer than 90 days and three typical gaps scores 0), plus the number of active maintainers and whether contributors are growing, where known. Higher is lower risk.
  • Innovation & surface — new capabilities in the feature ledger this year, API and MCP operations added, and the share of commits that are features: the mean of whichever we hold.
  • Community health (open-source tools only) — each is a direction, not a size: contributors this year against last, the bus factor now against a year ago, and issues closed per issue opened, where steady scores 50, doubled 100 and halved 0; plus the median time to a maintainer's first reply (an hour scores about 100, a month or more 0). A commercial card has no repository and carries none of the four.
  • Documented delivery (commercial tools) — when a vendor's documented new capabilities have slowed against its own baseline, that counts against the overall standing as heavily as two low dimensions. Steady delivery, or too little history to judge, leaves the standing alone; it is never a sixth score.
  • Open-source tools are scored on repository signals; commercial tools on their published changelog. Ranks compare tools within one category and one profile and need at least five measured peers; the overall standing needs three ranked dimensions. Best-in-breed or consolidator is a shape, not a quality, and is never scored.

Release-note detail over time

See how much detail World Monitor puts in its release notes, quarter by quarter, and compare it with tracked tools in the same category. This history uses up to ten retained, reviewed notes per tool; sparse or blank older quarters may reflect that limit.

Checking release-note history…

Explore the full chart →

Coverage

Missing something? Tell us

What World Monitor connects to, runs on and detects, read from its release notes and docs. So far: 1 new integration.

Show

1 change, tracked since Oct 24, 2026.

  • Oct 242026

    new FAA NOTAM ingestion via seed-notam-nms

    With FAA production

    chore(aviation): activate seed-notam-nms on FAA production (#9635) (#9648)

    v2.11.4 Source ↗

How we count

Read from 1 of 28 release notes and docs updates we hold for World Monitor. "First seen" is the earliest note that names something; "last" is the latest. Our history may start partway through World Monitor's life, so an old integration can show a recent first-seen date.

Each change counts once: "added 40 checks" is one line, so the numbers measure how often coverage moves, not how big the catalogue is or how well it detects.

Releases

Show
Coverage in all entries

28 entries

  1. November 20261
  2. October 20261
  3. September 20261
  4. March 20262
  5. February 202623
    Show
    Coverage in all entries

    28 entries

    Project health

    Issue, contributor and maintainer activity in koala73/worldmonitor, 2023-10 – 2026-09, as of 2026-09-25. Twelve-month figures first; the trend lines run the whole window.

    1. Contributors 168 +168 vs prior 12 months
    2. Maintainers 1 +1 joined · −0 left, last 12 months
    3. Bus factor 1 committers behind half the commits
    4. Community-filed 20% of issues opened, last 12 months
    5. Median time to close < 1 day first maintainer reply 10 hours
    6. Open backlog 224 of 1,921 issues ever filed
    1. Issues opened / month 6 · 124 communitymaintainers
    2. Open backlog 224
    3. Contributors / month 11
    4. Commits / month 1,179
    5. Stars 87,043
    Issue themes, last 12 months
    • bugs 30%
    • features 22%
    • questions 0%
    • docs 1%
    • other 47%

    Counts from the project's public repository and git history; no individuals are identified. Maintainers are the committers covering 80% of the last year's commits. how we measure this

    Ships a vulnerable library

    What its latest release locks, checked against known advisories.

    deepmerge-ts 7.1.5 in its image (Dockerfile.umami)

    high

    World Monitor 2.11.7 builds its image (Dockerfile.umami) from docker/umami/runtime/pnpm-lock.yaml, which locks deepmerge-ts 7.1.5. That version has GHSA-ggr8-5vv4-36mx.

    Fixed in deepmerge-ts 8.0.0. No World Monitor release includes it yet.

    GHSA-ggr8-5vv4-36mx advisory Checked Nov 3 against World Monitor 2.11.7

    mysql2 3.15.3 in its image (Dockerfile.umami)

    high

    World Monitor 2.11.7 builds its image (Dockerfile.umami) from docker/umami/runtime/pnpm-lock.yaml, which locks mysql2 3.15.3. That version has GHSA-3f6p-5ww8-9rcr.

    Fixed in mysql2 3.22.0. No World Monitor release includes it yet.

    GHSA-3f6p-5ww8-9rcr advisory Checked Nov 3 against World Monitor 2.11.7

    We check the lockfiles its release builds images from: 5 npm. Go modules, other lockfiles and vendored code aren't checked.

    Add the badge to your README

    Maintain this project? The badge links readers straight to this page, so they can follow every release here.

    Tracked by Cyber Toolchain Choose a badge style and copy the code →
    browse all tools → score card for your toolchain →