Skip to the content.

Findings a maintainer fixed

Of 112 scans, 26 ended with a maintainer shipping a fix. This page is the short version of the argument: a report is only worth writing if someone can act on it.

The fastest turnaround in the series was about six hours from filing to a merged pull request. Two were fixed by people other than the reporter — in one case a passer-by contributor adopted the filing and wrote the patch, in another the maintainer wrote their own diff because a contributor licence agreement had blocked the offered one, and said so in the release notes.

Date Repository Raw findings Real
2026-09-14 superlinked/sie 156 1 real
2026-09-03 samuelgursky/davinci-resolve-mcp 97 1 real
2026-08-31 shy3130/tick-stock-panel 77 1 real
2026-08-29 ginlix-ai/LangAlpha 372 1 real
2026-08-27 Zleap-AI/SAG 60 1 real
2026-08-20 whiteguo233/OpenBiliClaw 373 1 real
2026-08-17 zilliztech/memsearch 90 1 real
2026-08-12 jgravelle/jcodemunch-mcp 49 0 real
2026-08-08 theroyallab/tabbyAPI 18 2 real
2026-08-07 huangruiteng/loopx 57 1 real — withheld
2026-08-04 ArcReel/ArcReel 82 1 real — withheld
2026-08-03 the-momentum/open-wearables 145 2 real
2026-07-29 Project-N-E-K-O/N.E.K.O 783 1 real
2026-07-28 EvoScientist/EvoScientist 39 1 real
2026-07-19 vitali87/code-graph-rag 22 1 real
2026-07-03 AgentEra/Agently 25 1 real
2026-06-19 xerrors/Yuxi 70 see write-up
2026-06-08 54yyyu/zotero-mcp 4 6 real
2026-06-04 agentscope-ai/ReMe 159 3 real
2026-06-02 VRSEN/agency-swarm 48 see write-up
2026-05-28 evalstate/fast-agent 36 0 real
2026-05-27 pixeltable/pixeltable 67 see write-up
2026-05-21 dograh-hq/dograh 69 see write-up
2026-05-16 MervinPraison/PraisonAI 489 5 real
2026-05-15 msoedov/agentic_security 9 2 real
2026-05-14 gptme/gptme 57 3 real

← every scan in the series · scans that found nothing