superduper-io/superduper
Superduper: End-to-end framework for building custom AI applications and agents.
5.3k stars · 546 forks · Python
Avoid
Avoid: no human commits in a year, and most questions go unanswered.
Why
- No human commits since September 2025, and only 0 of 6 recent issues got a maintainer reply. (source 1, source 2, source 3, source 4)
- The latest version of PyPI package superduper-framework has 2 high-severity security advisories (GHSA-2799-6g5r-mmc7, PYSEC-2026-3077). (source 1, source 2, source 3, source 4)
What would change this
- A release or merged commit from a maintainer, or replies to recent issues.
- The latest version is patched or the advisory is withdrawn.
Maintenance
CompleteDormant
- Human commits, 30 days
- 0
- Human commits, 90 days
- 0
- Human commits, 365 days
- 0
- Bot share of commits, 365 days
- 0%
- Last commit
- Sep 1, 2025 (1 year ago)
- Last human commit
- Sep 1, 2025 (1 year ago)
- Authors, 90 days
- 0
- Last release
- Aug 26, 2025 (1 year ago)
- Median PR merge time
- under an hour
Responsiveness: of 6 recent issues, 0% got a maintainer reply. Median first response: n/a.
- No human commits in 365 days, and most issues go unanswered.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 100 since May 26, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 2
- Contributors
- 42
Top committers
- Duncan Blythe: 68% of commits
- jieguangzhou: 24% of commits
- fnikolai: 6% of commits
- blythed: 2% of commits
- No human commits in the last 365 days, so shares use the newest 100 commits back to 2025-05-26T12:47:39Z.
Sources: Commits, Contributors
Stars
CompleteOrganic, confidence high
Bursts
- Dec 5, 2023 to Dec 30, 2023: about 3k more stars than usual, peak 563 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- Oct 30, 2024 to Nov 3, 2024: about 68 more stars than usual, peak 30 in one day, a spike that tapers off. Outside explanation: a jump in forks.
- The star history was reset at some point, so earlier stars aren't counted.
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- The star history looks organic.
- The star history has a zero run of 26 weeks or more, so the analysis starts after it.
Sources: How star history is analyzed
Risk
CompleteFlags
- High: OSV, via deps.dev, lists GHSA-2799-6g5r-mmc7, PYSEC-2026-3077 at HIGH severity on the latest version of superduper-framework. Details
License
- Now
- Apache-2.0 (OSI-approved)
- A year ago
- Apache-2.0 (OSI-approved)
Packages
- superduper-framework (PYPI): latest 0.10.0, published Aug 26, 2025
Advisories for the latest version: GHSA-2799-6g5r-mmc7 (high), PYSEC-2026-3077 (high)
Package and advisory data: deps.dev and OSV.
Sources: GitHub: superduper-io/superduper, deps.dev: PyPI superduper-framework, OSV: GHSA-2799-6g5r-mmc7, OSV: PYSEC-2026-3077
Badge
Add this to a README to show the current verdict:
[](https://reporadar.ai/superduper-io/superduper)Earlier verdicts
- Oct 14, 2026: Avoid
- Oct 14, 2026: Avoid
Computed 7 hours ago · method 2026.10.2