chroma-core/chroma

Maintenance

Slowing

Human commits, 30 days

40

Human commits, 90 days

115

Human commits, 365 days

1.2k

Bot share of commits, 365 days

1%

Last commit

Oct 13, 2026 (1 day ago)

Last human commit

Oct 13, 2026 (1 day ago)

Authors, 90 days

10

Last release

May 5, 2026 (5 months ago)

Median PR merge time

16 hours

Responsiveness: of 30 recent issues, 0% got a maintainer reply. Median first response: n/a.

• Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.

Sources: Commits, Releases, Merged pull requests, Issues

People

Owner

Organization

Commits sampled

493 since Oct 14, 2025

Authors for half of commits

2

Authors for 80% of commits

5

Contributors

191

Top committers

• rescrv: 34% of commits
• tanujnay112: 22% of commits
• HammadB: 10% of commits
• davedash: 8% of commits
• sanketkedia: 5% of commits

• Shares come from the newest sampled commits, since the commit sample is capped.

Sources: Commits, Contributors

Stars

Organic, confidence high

Bursts

• Feb 13, 2023 to Mar 1, 2023: about 360 more stars than usual, peak 80 in one day, a spike that tapers off. Outside explanation: a jump in forks.
• Apr 3, 2023 to Apr 19, 2023: about 2.4k more stars than usual, peak 393 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
• Jan 5, 2025 to Jan 9, 2025: about 581 more stars than usual, peak 173 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
• Aug 27, 2025 to Sep 4, 2025: about 732 more stars than usual, peak 307 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks.
• Jan 18, 2026 to Jan 19, 2026: about 52 more stars than usual, peak 53 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
• Mar 26, 2026 to Mar 29, 2026: about 134 more stars than usual, peak 72 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
• Apr 8, 2026 to Apr 9, 2026: about 55 more stars than usual, peak 56 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.

• 2 stars GitHub has since removed (tracked since Oct 14, 2026).

Anyone can buy stars for any repo; bursts alone don't prove the owner did.

• The star history looks organic.

Sources: How star history is analyzed

Risk

Flags

• High: OSV, via deps.dev, lists GHSA-36p7-vc44-83pf, GHSA-f4j7-r4q5-qw2c at CRITICAL severity on the latest version of chromadb. Details
• High: OSV, via deps.dev, lists GHSA-2wm9-hf6c-p5cr, GHSA-xph7-9rjv-w5fr, PYSEC-2026-3813, PYSEC-2026-3815 at HIGH severity on the latest version of chromadb. Details
• Warning: OSV, via deps.dev, lists PYSEC-2026-311, PYSEC-2026-3814 at MODERATE, LOW or unrated severity on the latest version of chromadb. Details

License

Now

Apache-2.0 (OSI-approved)

A year ago

Apache-2.0 (OSI-approved)

Packages

• chromadb (PYPI): latest 1.5.9, published May 5, 2026
  Advisories for the latest version: GHSA-2wm9-hf6c-p5cr (high), GHSA-36p7-vc44-83pf (critical), GHSA-f4j7-r4q5-qw2c (critical), GHSA-xph7-9rjv-w5fr (high), PYSEC-2026-311 (unknown), PYSEC-2026-3813 (high), PYSEC-2026-3814 (unknown), PYSEC-2026-3815 (high)

Package and advisory data: deps.dev and OSV.

OpenSSF Scorecard: 5.1 out of 10 (via deps.dev).

Sources: GitHub: chroma-core/chroma, deps.dev: PyPI chromadb, OSV: GHSA-2wm9-hf6c-p5cr, OSV: GHSA-36p7-vc44-83pf, OSV: GHSA-f4j7-r4q5-qw2c, OSV: GHSA-xph7-9rjv-w5fr, OSV: PYSEC-2026-311, OSV: PYSEC-2026-3813, OSV: PYSEC-2026-3814, OSV: PYSEC-2026-3815