milvus-io/milvus
Milvus is a high-performance, cloud-native vector database built for scalable vector ANN search
46.4k stars · 4.3k forks · Go
Caution
Caution: the published package has not been released in two years.
Why
- The Go package github.com/milvus-io/milvus has had no release since June 2021, while the repository has 2,471 human commits in the last year; the old release has 4 known security advisories (GHSA-7ppg-37fh-vcr6, GHSA-mhjq-8c7m-3f7p, GO-2025-4114), which do not show whether the current code is affected. (source 1, source 2, source 3, source 4, source 5, source 6)
What would change this
- A new package release is published.
- Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.; Authors in the last 90 days are counted from the sampled commits only.)
Maintenance
PartialActive
- Human commits, 30 days
- 189
- Human commits, 90 days
- 648
- Human commits, 365 days
- 2.5k
- Bot share of commits, 365 days
- 1%
- Last commit
- Oct 14, 2026 (17 hours ago)
- Last human commit
- Oct 14, 2026 (17 hours ago)
- Authors, 90 days
- 59
- Last release
- Oct 14, 2026 (23 hours ago)
- Median PR merge time
- 17 hours
Responsiveness: of 19 recent issues, 5% got a maintainer reply. Median first response: 15 days.
- Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
- Authors in the last 90 days are counted from the sampled commits only.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 495 since Oct 14, 2025
- Authors for half of commits
- 9
- Authors for 80% of commits
- 21
- Contributors
- 336
Top committers
- xiaofan-luan: 10% of commits
- liliu-z: 8% of commits
- congqixia: 7% of commits
- bigsheeper: 7% of commits
- weiliu1031: 4% of commits
- Shares come from the newest sampled commits, since the commit sample is capped.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- Oct 21, 2019 to Nov 13, 2019: about 1.6k more stars than usual, peak 319 in one day, a spike that tapers off. We couldn't check for an outside explanation.
- Jan 10, 2020 to Jan 13, 2020: about 142 more stars than usual, peak 71 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
- May 8, 2021 to May 12, 2021: about 396 more stars than usual, peak 202 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jun 29, 2021 to Jun 30, 2021: about 129 more stars than usual, peak 112 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jul 15, 2021 to Jul 18, 2021: about 300 more stars than usual, peak 183 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Sep 17, 2021 to Sep 19, 2021: about 92 more stars than usual, peak 56 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Oct 12, 2021 to Oct 14, 2021: about 225 more stars than usual, peak 122 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jun 22, 2022 to Jun 29, 2022: about 397 more stars than usual, peak 102 in one day, a shape we can't classify. Outside explanation: a jump in issues and pull requests.
- Aug 24, 2022 to Aug 29, 2022: about 346 more stars than usual, peak 101 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Sep 17, 2022 to Sep 22, 2022: about 567 more stars than usual, peak 178 in one day, a shape we can't classify. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Apr 17, 2023 to Apr 18, 2023: about 306 more stars than usual, peak 269 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Jun 2, 2023 to Jun 3, 2023: about 127 more stars than usual, peak 125 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Jun 27, 2023 to Jun 28, 2023: about 176 more stars than usual, peak 161 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Nov 15, 2024 to Nov 17, 2024: about 169 more stars than usual, peak 136 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
- Sep 12, 2025 to Sep 14, 2025: about 147 more stars than usual, peak 116 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
- Nov 11, 2025 to Dec 4, 2025: about 2.6k more stars than usual, peak 163 in one day, a shape we can't classify. Outside explanation: a jump in issues and pull requests.
- 3 stars GitHub has since removed (tracked since Oct 13, 2026).
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
Sources: How star history is analyzed
Risk
CompleteFlags
- Warning: The latest release of the Go package github.com/milvus-io/milvus was published more than 24 months ago, while the repository has had 2,471 human commits in the last year (deps.dev); the old release has 4 known security advisories (GHSA-7ppg-37fh-vcr6, GHSA-mhjq-8c7m-3f7p, GO-2025-4114), which do not show whether the current code is affected. Details
License
- Now
- Apache-2.0 (OSI-approved)
- A year ago
- Apache-2.0 (OSI-approved)
Packages
- github.com/milvus-io/milvus (GO): latest v1.1.1, published Jun 16, 2021
Advisories for the latest version: GHSA-7ppg-37fh-vcr6 (critical), GHSA-mhjq-8c7m-3f7p (critical), GO-2025-4114 (unknown), GO-2026-4481 (unknown)
Package and advisory data: deps.dev and OSV.
OpenSSF Scorecard: 4.4 out of 10 (via deps.dev).
Sources: GitHub: milvus-io/milvus, deps.dev: Go github.com/milvus-io/milvus, OSV: GHSA-7ppg-37fh-vcr6, OSV: GHSA-mhjq-8c7m-3f7p, OSV: GO-2025-4114, OSV: GO-2026-4481
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/milvus-io/milvus)Earlier verdicts
- Oct 14, 2026: Caution
- Oct 13, 2026: Caution
- Oct 13, 2026: Avoid