berriai / litellm
Repository health
Security, maintenance, dependencies and license for berriai/litellm.
Security
57 dependencies checked (7 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 6.2/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 0d ago10/10
- License filePermissive license: MIT10/10
- Tests run on pull requestsCI configured + tests present10/10
- Static analysis on commitsCodeQL action detected in workflows10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesAll actions pinned to SHAs10/10
- Code review before mergeOnly 2/20 recent PRs had requested reviewers2/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Branch protectionDefault branch 'main' has no protection rule0/10
GitHub Code Scanning: no alerts.
Maintenance
Outside contributions: 5 of 83 external pull requests merged (12% of those decided), median 0.6 days to merge.From the 83 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 20
- 0 stale (60+ days, no update in 30)
- Merged
- 2
- of the 30 latest
- Median time to merge
- 1 day
- From bots
- 3
- not listed below
Open
- #47806 fix(bedrock): route Claude 5-family json_schema to native structured outputskaust1495 · opened 1 day ago
- #47893 fix(mcp): preserve URL toolset scope after catalog authority refresh (#47856)JakkulaVeerababu · opened today
- #47812 feat(dashscope): derive protocol bases from one domainBytechoreographer · opened 1 day ago
- #35600 feat(realtime): support latest OpenAI audio modelsemerzon · opened 80 days ago
- #38669 fix(anthropic): respect chat completions override for thinkingdiverpet · opened 54 days ago
Recently merged
- #47670 fix(security): stop trusting the compromised eMudhra root CAryan-crabbe-berri · merged 22 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- kerry-berri31 commits · 36%
- mateo-berri20 commits · 23%
- yassin-berriai7 commits · 8%
- yuneng-berri4 commits · 5%
- yujonglee-berri3 commits · 3%
Of the 86 most recent commits.
Issues
- Open
- 5,561
- issues and pull requests, as GitHub counts them
- Median time to close
- 99 days
- from 12 closed of the 53 latest
- Awaiting first reply
- 1
- of 41 open among the 53 latest
- Oldest open
- 2.0 years
Most wanted
- #47826 [SECURITY] litellm 1.107.0 compromised (PyPI removed; Docker latest/main-stable removed): cook.pth credential stealer + sitecustomize RCE loader, built from lookalike repo Berri-AI/litellm16 reactions · 14 comments
- #24987 [Bug]: Prompt Cache Not Working with GPT-5.4 via litellm proxy, but works with direct OpenAI API9 reactions · 4 comments
- #22637 [Bug]: Bedrock Converse fails with parallel_tool_calls on Claude 4.5+6 reactions · 6 comments
Rates come from the 53 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: MIT · 7 deps checked · 0 potential conflicts.