We scanned the CI of 139 popular JS/TS repos

Analyzed 2026-11-02 with the same engine that powers the free audit.

Results

Repos with pull-request workflows and no concurrency group	97 of 129 (75.2%)
CI jobs without `timeout-minutes`	1,329 of 2,181 (60.9%)
Repos with at least one job without a timeout	131 of 139 (94.2%)
Repos installing dependencies without cache in at least one CI workflow	41 of 121 (33.9%)
Repos clean on all three checks	1 of 139
Median CI/CD Health Score	84/100

Method

Sample: GitHub search for the most-starred repos with 1,000–20,000 stars and a push since 2026-09-01: top 100 TypeScript and top 50 JavaScript, archived repos excluded (149 repos). 10 had no GitHub Actions workflows.
Scope: only .github/workflows/* and the root package.json.
Conservative by design. Not counted: workflows whose setup lives in a local composite action or a reusable workflow (we can’t see inside); release, publish and deploy workflows, which often skip caches on purpose; explicitly disabled caches; npm projects that actions/setup-node v5+ caches automatically.
Checked by hand: 15 flagged repos were reviewed manually. One rule was tightened after the first round.
Bias: popular, actively maintained open-source projects. Private company repos may look better or worse.

Raw data

Sorted by CI/CD score, lowest first. Scores reflect these three checks only, not the overall quality of a project.

Repo	CI/CD	No cache	No concurrency	Jobs w/o timeout
apollographql/apollo-client	46	yes	yes	21 / 21
clauderic/dnd-kit	46	yes	yes	9 / 9
bvaughn/react-window	46	yes	yes	6 / 6
eigent-ai/eigent	56	yes	yes	9 / 17
C4illin/ConvertX	58	yes	—	8 / 8
verdaccio/verdaccio	58	yes	—	20 / 27
vercel/vercel	58	yes	—	31 / 46
electerm/electerm	58	yes	—	33 / 33
mswjs/msw	60	yes	yes	10 / 10
GoogleChrome/chrome-extensions-samples	60	yes	yes	5 / 5
infernojs/inferno	60	yes	yes	5 / 6
you-dont-need/You-Dont-Need-Lodash-Underscore	64	yes	yes	3 / 3
resend/react-email	66	yes	yes	0 / 11
ether/etherpad	66	yes	yes	38 / 41
redis/node-redis	66	yes	yes	12 / 12
apitable/apitable	66	yes	yes	5 / 10
sweetalert2/sweetalert2	66	yes	—	1 / 4
alam00000/bentopdf	66	yes	yes	17 / 17
CesiumGS/cesium	68	yes	—	15 / 15
mlc-ai/web-llm	70	yes	yes	3 / 7
bluesky-social/social-app	70	yes	yes	36 / 39
sindresorhus/type-fest	70	yes	yes	5 / 5
Anionex/banana-slides	70	yes	yes	12 / 22
OptimalBits/bull	70	yes	yes	3 / 3
lyswhut/lx-music-mobile	74	yes	yes	5 / 5
subquery/subql	74	yes	yes	15 / 16
tusen-ai/naive-ui	74	yes	yes	4 / 4
lidge-jun/opencodex	74	yes	yes	14 / 57
hydralauncher/hydra	74	yes	yes	10 / 10
sass/sass	74	yes	yes	10 / 10
mdx-js/mdx	74	yes	yes	4 / 4
mjmlio/mjml	74	yes	yes	4 / 4
compiler-explorer/compiler-explorer	76	—	yes	15 / 15
unocss/unocss	76	—	yes	3 / 6
conventional-changelog/commitlint	76	—	yes	8 / 8
oblador/react-native-vector-icons	76	—	yes	8 / 10
leon-ai/leon	76	—	yes	3 / 5
ag-ui-protocol/ag-ui	76	—	yes	56 / 73
signalapp/Signal-Desktop	76	—	yes	7 / 20
typescript-eslint/typescript-eslint	76	—	yes	31 / 31
react-native-maps/react-native-maps	76	—	yes	6 / 6
Koenkk/zigbee2mqtt	76	—	yes	10 / 10
ag-grid/ag-grid	76	—	yes	40 / 78
open-metadata/OpenMetadata	76	—	yes	64 / 125
web-infra-dev/midscene	76	—	yes	12 / 27
jupyterlab/jupyterlab	76	—	yes	24 / 43
Chocobozzz/PeerTube	76	—	yes	8 / 8
cure53/DOMPurify	76	—	yes	10 / 10
gpujs/gpu.js	76	yes	yes	0 / 2
elysiajs/elysia	78	yes	yes	2 / 2
vitest-dev/vitest	78	yes	—	15 / 28
lottie-react-native/lottie-react-native	78	yes	—	6 / 6
satnaing/shadcn-admin	78	yes	yes	2 / 2
remarkjs/react-markdown	78	yes	yes	2 / 2
jasmine/jasmine	78	yes	yes	2 / 2
danielmiessler/LifeOS	80	—	yes	4 / 4
genlayerlabs/genlayer-project-boilerplate	80	—	yes	5 / 5
anthropics/claude-quickstarts	80	—	yes	5 / 5
langchain-ai/langchainjs	80	—	yes	34 / 34
tradingview/lightweight-charts	80	—	yes	4 / 8
triggerdotdev/trigger.dev	80	—	yes	48 / 54
udecode/plate	80	—	yes	13 / 19
scalar/scalar	80	—	yes	2 / 70
Vincentwei1021/video-shotcraft	80	—	yes	7 / 8
rjsf-team/react-jsonschema-form	80	—	yes	10 / 11
yc-software/qm	80	—	yes	14 / 21
sindresorhus/ky	82	yes	—	2 / 2
mountain-loop/yaak	84	—	yes	11 / 12
reduxjs/reselect	84	—	yes	7 / 7
eggjs/egg	84	—	yes	11 / 13
rowboatlabs/rowboat	84	—	yes	6 / 6
Foundry376/Mailspring	84	—	yes	13 / 14
langchain-ai/openwiki	84	—	yes	8 / 8
ionic-team/capacitor	84	—	yes	3 / 18
carloscuesta/gitmoji	84	—	yes	3 / 3
umijs/qiankun	84	—	yes	14 / 19
omnivore-app/omnivore	84	—	yes	5 / 5
VERT-sh/VERT	84	—	yes	3 / 3
adobe/react-spectrum	84	—	yes	10 / 10
YishenTu/claudian	84	—	yes	5 / 24
Termix-SSH/Termix	84	—	yes	24 / 25
hicccc77/WeFlow	84	—	yes	8 / 8
miuuyy/codex-chatgpt-web	84	—	yes	4 / 4
decaporg/decap-cms	84	—	yes	7 / 8
handlebars-lang/handlebars.js	84	—	yes	5 / 5
youzan/vant-weapp	84	—	yes	6 / 6
enyo/dropzone	84	—	yes	6 / 6
pinojs/pino	84	—	yes	8 / 8
emotion-js/emotion	84	—	yes	8 / 8
JedWatson/classnames	84	—	yes	4 / 4
apache/pouchdb	84	—	yes	11 / 11
dataelement/dsh-desktop	84	—	yes	7 / 11
less/less.js	84	—	yes	5 / 5
huggingface/transformers.js	84	—	yes	3 / 3
jsdoc/jsdoc	84	—	yes	3 / 3
NodeBB/NodeBB	84	—	yes	4 / 4
teambit/bit	86	yes	yes	0 / 3
elizaOS/eliza	88	—	—	14 / 195
radix-ui/primitives	88	—	—	7 / 9
adonisjs/core	88	—	—	5 / 5
vercel-labs/json-render	88	—	—	5 / 8
nukeop/nuclear	88	—	—	17 / 17
wasp-lang/wasp	88	—	—	29 / 30
vuejs/vitepress	88	—	—	6 / 6
nodemailer/nodemailer	88	—	—	5 / 5
redwoodjs/graphql	88	—	—	3 / 3
video-dev/hls.js	88	—	—	11 / 11
a2ui-project/a2ui	88	—	—	28 / 40
graphql/graphiql	88	—	—	16 / 16
diegomura/react-pdf	88	—	—	6 / 6
zhaoolee/ChineseBQB	88	—	—	4 / 4
javascript-obfuscator/javascript-obfuscator	88	—	yes	2 / 2
electric-sql/pglite	88	—	—	5 / 6
GLips/Figma-Context-MCP	88	—	yes	2 / 2
umijs/umi	88	—	—	14 / 16
faker-js/faker	88	—	yes	0 / 15
amark/gun	88	—	—	3 / 3
plotly/plotly.js	88	—	—	34 / 35
JoeanAmier/TikTokDownloader	88	—	—	7 / 7
playcanvas/engine	88	—	—	6 / 15
hubotio/hubot	88	—	—	9 / 9
zotero/zotero	88	—	—	3 / 6
Fei-Away/Codex-Dream-Skin	88	—	—	8 / 9
foambubble/foam	92	—	yes	1 / 11
tinymce/tinymce	92	—	yes	1 / 1
ParadevAI/Paradev	92	—	yes	0 / 49
documenso/documenso	92	—	yes	0 / 16
forwardemail/superagent	92	—	yes	1 / 1
librespeed/speedtest	92	—	—	2 / 4
ahmedkhaleel2004/gitdiagram	96	—	—	1 / 6
Effect-TS/effect	96	—	—	1 / 18
rmyndharis/OpenWA	96	—	yes	0 / 42
DuarteSantos8/openGym	96	—	—	1 / 22
hemanth/functional-programming-jargon	96	—	—	1 / 1
liabru/matter-js	96	—	—	1 / 1
commitizen/cz-cli	96	—	—	1 / 1
YuJunZhiXue/dsh-purge	96	—	—	1 / 1
maillab/cloud-mail	96	—	—	1 / 1
corsairdev/corsair	100	—	—	0 / 15

Run the same audit on your repo →