usememos/memos

A personal timeline for quick notes. Write short memos, find them later by search, tag, or date. Open source and self-hosted.

63.8k stars · 4.9k forks · Go

At risk

At risk: a high-severity security advisory affects the latest version.

Why

The latest version of Go package github.com/usememos/memos has 1 high-severity security advisory (GHSA-96gq-6ch5-mm54). (source 1, source 2, source 3, source 4, source 5, source 6, source 7, source 8)

What would change this

The latest version is patched or the advisory is withdrawn.
Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.)

Maintenance

Partial

Active

Human commits, 30 days: 91
Human commits, 90 days: 257
Human commits, 365 days: 1k
Bot share of commits, 365 days: 0%
Last commit: Oct 14, 2026 (19 hours ago)
Last human commit: Oct 14, 2026 (19 hours ago)
Authors, 90 days: 38
Last release: Sep 19, 2026 (25 days ago)
Median PR merge time: 7 hours

Responsiveness: of 30 recent issues, 57% got a maintainer reply. Median first response: 21 hours.

Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.

Sources: Commits, Releases, Merged pull requests, Issues

People

Complete

Owner: Organization
Commits sampled: 500 since Oct 14, 2025
Authors for half of commits: 2
Authors for 80% of commits: 3
Contributors: 398

Top committers

boojack: 49% of commits
johnnyjoygh: 25% of commits
bluedbird: 12% of commits
wally-an: 1% of commits
anandghegde: 0% of commits

The top committer changed during this period.

Shares come from the newest sampled commits, since the commit sample is capped.

Sources: Commits, Contributors

Stars

Complete

Organic, confidence high

Bars show stars gained each week. Orange bars overlap a burst.

Bursts

Jul 4, 2022 to Jul 5, 2022: about 26 more stars than usual, peak 20 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Aug 20, 2022 to Aug 25, 2022: about 163 more stars than usual, peak 46 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Oct 23, 2022 to Oct 26, 2022: about 133 more stars than usual, peak 55 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Nov 19, 2022 to Dec 9, 2022: about 2.4k more stars than usual, peak 503 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Dec 19, 2022 to Dec 20, 2022: about 167 more stars than usual, peak 158 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Feb 5, 2023 to Feb 10, 2023: about 262 more stars than usual, peak 77 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Feb 22, 2023 to Mar 9, 2023: about 3.5k more stars than usual, peak 884 in one day, a shape we can't classify. Outside explanation: a jump in forks, a jump in issues and pull requests.
Apr 16, 2023 to Apr 20, 2023: about 544 more stars than usual, peak 258 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Jun 10, 2023 to Jun 10, 2023: about 65 more stars than usual, peak 84 in one day, a shape we can't classify. Outside explanation: a jump in forks, a jump in issues and pull requests.
Jul 1, 2023 to Jul 5, 2023: about 188 more stars than usual, peak 65 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Jul 11, 2023 to Jul 21, 2023: about 1.1k more stars than usual, peak 288 in one day, a spike that tapers off. Outside explanation: a Hacker News post, a jump in forks, a jump in issues and pull requests.
Aug 10, 2023 to Aug 11, 2023: about 116 more stars than usual, peak 127 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Sep 19, 2023 to Sep 27, 2023: about 594 more stars than usual, peak 169 in one day, a shape we can't classify. Outside explanation: a jump in forks, a jump in issues and pull requests.
Nov 19, 2023 to Nov 19, 2023: about 67 more stars than usual, peak 84 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Dec 17, 2023 to Dec 20, 2023: about 181 more stars than usual, peak 109 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Jan 30, 2024 to Feb 8, 2024: about 1.3k more stars than usual, peak 280 in one day, a shape we can't classify. Outside explanation: a jump in forks, a jump in issues and pull requests.
Oct 27, 2024 to Nov 9, 2024: about 2.5k more stars than usual, peak 494 in one day, a shape we can't classify. Outside explanation: a jump in forks.
Jan 25, 2025 to Jan 27, 2025: about 143 more stars than usual, peak 102 in one day, a spike that tapers off. Outside explanation: a jump in forks, a jump in issues and pull requests.
Feb 26, 2025 to Feb 27, 2025: about 128 more stars than usual, peak 120 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Mar 4, 2025 to Mar 7, 2025: about 279 more stars than usual, peak 146 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
May 18, 2025 to May 30, 2025: about 1.5k more stars than usual, peak 411 in one day, a shape we can't classify. Outside explanation: a jump in issues and pull requests.
Jul 7, 2025 to Jul 10, 2025: about 171 more stars than usual, peak 95 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Oct 29, 2025 to Oct 30, 2025: about 120 more stars than usual, peak 105 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.
Jan 1, 2026 to Feb 1, 2026: about 7.6k more stars than usual, peak 1.6k in one day, a shape we can't classify. Outside explanation: a jump in issues and pull requests.
Sep 13, 2026 to Sep 14, 2026: about 68 more stars than usual, peak 74 in one day, a spike that tapers off. Outside explanation: a jump in issues and pull requests.

11 stars GitHub has since removed (tracked since Oct 13, 2026).

Anyone can buy stars for any repo; bursts alone don't prove the owner did.

The star history looks organic.

Sources: How star history is analyzed

Risk

Complete

Flags

High: OSV, via deps.dev, lists GHSA-96gq-6ch5-mm54 at HIGH severity on the latest version of github.com/usememos/memos. Details
Warning: OSV, via deps.dev, lists GO-2025-3492, GO-2025-3936, GO-2025-3937, GO-2025-4127, GO-2026-5403 at MODERATE, LOW or unrated severity on the latest version of github.com/usememos/memos. Details

License

Now: MIT (OSI-approved)
A year ago: MIT (OSI-approved)

Packages

github.com/usememos/memos (GO): latest v0.31.0, published Sep 19, 2026
Advisories for the latest version: GHSA-96gq-6ch5-mm54 (high), GO-2025-3492 (unknown), GO-2025-3936 (unknown), GO-2025-3937 (unknown), GO-2025-4127 (unknown), GO-2026-5403 (unknown)

Package and advisory data: deps.dev and OSV.

Sources: GitHub: usememos/memos, deps.dev: Go github.com/usememos/memos, OSV: GHSA-96gq-6ch5-mm54, OSV: GO-2025-3492, OSV: GO-2025-3936, OSV: GO-2025-3937, OSV: GO-2025-4127, OSV: GO-2026-5403

Badge

Add this to a README to show the current verdict:

[![RepoRadar](https://reporadar.ai/usememos/memos/badge.svg)](https://reporadar.ai/usememos/memos)

Earlier verdicts

Oct 14, 2026: At risk
Oct 13, 2026: At risk
Oct 13, 2026: At risk

Computed 18 hours ago · method 2026.10.2