NousResearch/hermes-agent
The agent that grows with you
253.6k stars · 55k forks · Python
At risk
At risk: a high-severity security advisory affects the latest version.
Why
- The latest version of PyPI package hermes-agent has 1 high-severity security advisory (PYSEC-2026-3577). (source 1, source 2, source 3, source 4, source 5, source 6)
What would change this
- The latest version is patched or the advisory is withdrawn.
- Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.; Authors in the last 90 days are counted from the sampled commits only.)
Maintenance
PartialActive
- Human commits, 30 days
- 16.9k
- Human commits, 90 days
- 36.4k
- Human commits, 365 days
- 52k
- Bot share of commits, 365 days
- 1%
- Last commit
- Oct 14, 2026 (1 day ago)
- Last human commit
- Oct 14, 2026 (1 day ago)
- Authors, 90 days
- 73
- Last release
- Oct 14, 2026 (1 day ago)
- Median PR merge time
- 3 hours
Responsiveness: of 30 recent issues, 100% got a maintainer reply. Median first response: under an hour.
- Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
- Authors in the last 90 days are counted from the sampled commits only.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 497 since Oct 14, 2025
- Authors for half of commits
- 2
- Authors for 80% of commits
- 10
- Contributors
- 399
Top committers
- alt-glitch: 49% of commits
- teknium1: 15% of commits
- ethernet8023: 5% of commits
- itpartypattaya: 3% of commits
- ZidoCode: 3% of commits
- Shares come from the newest sampled commits, since the commit sample is capped.
Sources: Commits, Contributors
Stars
CompleteMostly organic, confidence high
Bursts
- Feb 25, 2026 to Apr 7, 2026: about 32.6k more stars than usual, peak 4.9k in one day, a spike that tapers off. No outside explanation found, so this burst is unexplained.
- Apr 8, 2026 to Apr 30, 2026: about 77.9k more stars than usual, peak 9.8k in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
- 41 stars GitHub has since removed (tracked since Oct 13, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- Some star bursts have no matching forks, issues, releases, or launch coverage.
- Anyone can buy stars for any repo, so this describes the star history only.
Sources: How star history is analyzed
Risk
CompleteFlags
- High: OSV, via deps.dev, lists PYSEC-2026-3577 at HIGH severity on the latest version of hermes-agent. Details
- Warning: OSV, via deps.dev, lists GHSA-pmqc-57g8-c22c, GHSA-xq8w-9jvx-gm3v, PYSEC-2026-3576 at MODERATE, LOW or unrated severity on the latest version of hermes-agent. Details
License
- Now
- MIT (OSI-approved)
- A year ago
- Not known
Packages
- hermes-agent (PYPI): latest 0.19.0, published Jul 20, 2026
Advisories for the latest version: GHSA-pmqc-57g8-c22c (moderate), GHSA-xq8w-9jvx-gm3v (moderate), PYSEC-2026-3576 (moderate), PYSEC-2026-3577 (high)
Package and advisory data: deps.dev and OSV.
Sources: GitHub: NousResearch/hermes-agent, deps.dev: PyPI hermes-agent, OSV: GHSA-pmqc-57g8-c22c, OSV: GHSA-xq8w-9jvx-gm3v, OSV: PYSEC-2026-3576, OSV: PYSEC-2026-3577
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/NousResearch/hermes-agent)Earlier verdicts
- Oct 14, 2026: At risk
- Oct 13, 2026: At risk
- Oct 13, 2026: At risk
Computed 20 hours ago · method 2026.10.2