QuantumNous/new-api
A unified AI model hub for aggregation & distribution. It supports cross-converting various LLMs into OpenAI-compatible, Claude-compatible, or Gemini-compatible formats. A centralized gateway for personal and enterprise model management.
49.9k stars · 12k forks · Go
Avoid
Avoid: a critical security advisory affects the latest version.
Why
- The latest version of Go package github.com/QuantumNous/new-api has 2 critical security advisories (GHSA-6x2c-phff-wx57, GHSA-8r8v-xf7q-rcpr). (source 1, source 2, source 3, source 4, source 5, source 6, source 7, source 8, source 9, source 10, source 11, source 12, source 13, source 14)
What would change this
- The latest version is patched or the advisory is withdrawn.
- Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.)
Maintenance
PartialActive
- Human commits, 30 days
- 173
- Human commits, 90 days
- 406
- Human commits, 365 days
- 2k
- Bot share of commits, 365 days
- 4%
- Last commit
- Oct 14, 2026 (17 hours ago)
- Last human commit
- Oct 14, 2026 (17 hours ago)
- Authors, 90 days
- 55
- Last release
- Oct 12, 2026 (2 days ago)
- Median PR merge time
- 2 hours
Responsiveness: of 30 recent issues, 43% got a maintainer reply. Median first response: 9 hours.
- Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 479 since Oct 14, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 5
- Contributors
- 315
Top committers
- Calcium-Ion: 58% of commits
- seefs001: 14% of commits
- feitianbubu: 5% of commits
- QuentinHsu: 2% of commits
- t0ng7u: 2% of commits
- Shares come from the newest sampled commits, since the commit sample is capped.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- Mar 1, 2024 to Mar 4, 2024: about 242 more stars than usual, peak 166 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Mar 14, 2024 to Mar 15, 2024: about 66 more stars than usual, peak 63 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Dec 3, 2024 to Dec 5, 2024: about 65 more stars than usual, peak 49 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- 12 stars GitHub has since removed (tracked since Oct 13, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
Sources: How star history is analyzed
Risk
CompleteFlags
- High: OSV, via deps.dev, lists GHSA-6x2c-phff-wx57, GHSA-8r8v-xf7q-rcpr at CRITICAL severity on the latest version of github.com/QuantumNous/new-api. Details
- High: OSV, via deps.dev, lists GHSA-v828-m3pf-vq9q at HIGH severity on the latest version of github.com/QuantumNous/new-api. Details
- Warning: OSV, via deps.dev, lists GHSA-j6gc-4893-qwmp, GO-2025-4154, GO-2026-4813, GO-2026-5652, GO-2026-6240, GO-2026-6242, GO-2026-6243, GO-2026-6244, GO-2026-6245 at MODERATE, LOW or unrated severity on the latest version of github.com/QuantumNous/new-api. Details
License
- Now
- AGPL-3.0 (OSI-approved)
- A year ago
- Not known
Packages
- github.com/QuantumNous/new-api (GO): latest v0.13.2, published Apr 27, 2026
Advisories for the latest version: GHSA-6x2c-phff-wx57 (critical), GHSA-8r8v-xf7q-rcpr (critical), GHSA-j6gc-4893-qwmp (moderate), GHSA-v828-m3pf-vq9q (high), GO-2025-4154 (unknown), GO-2026-4813 (unknown), GO-2026-5652 (unknown), GO-2026-6240 (unknown), GO-2026-6242 (unknown), GO-2026-6243 (unknown), GO-2026-6244 (unknown), GO-2026-6245 (unknown)
Package and advisory data: deps.dev and OSV.
Sources: GitHub: QuantumNous/new-api, deps.dev: Go github.com/QuantumNous/new-api, OSV: GHSA-6x2c-phff-wx57, OSV: GHSA-8r8v-xf7q-rcpr, OSV: GHSA-j6gc-4893-qwmp, OSV: GHSA-v828-m3pf-vq9q, OSV: GO-2025-4154, OSV: GO-2026-4813, OSV: GO-2026-5652, OSV: GO-2026-6240, OSV: GO-2026-6242, OSV: GO-2026-6243, OSV: GO-2026-6244, OSV: GO-2026-6245
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/QuantumNous/new-api)Earlier verdicts
- Oct 14, 2026: Avoid
- Oct 13, 2026: Avoid
- Oct 13, 2026: Avoid