chatgptnextweb / nextchat
Repository health
Security, maintenance, dependencies and license for chatgptnextweb/nextchat.
Security
75 dependencies checked (25 direct), npm, via deps.dev. Findings apply only to the packages and versions checked.
Security checks (RepoPilot estimate) · 6.0/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- Recent activityLast commit 3d ago10/10
- License filePermissive license: MIT10/10
- Tests run on pull requestsCI configured + tests present10/10
- Automated dependency updatesDependabot configured10/10
- Least-privilege CI tokensWorkflows declare explicit, scoped permissions10/10
- Pinned dependenciesOnly 0/24 actions pinned to SHAs2/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 35 of 93 external pull requests merged (63% of those decided), median 0 days to merge.From the 100 most recently updated pull requests, bots excluded.
Pull requests
- Open
- 19
- 4 stale (60+ days, no update in 30)
- Merged
- 4
- of the 30 latest
- Median time to merge
- Same day
- From bots
- 0
- not listed below
Open
- #6922 fix: use the api version of a custom google endpointaron-intframe · opened 2 days ago
- #6890 feat: add Mizumi providermizumico · opened 47 days ago
- #6896 feat: support custom request params (e.g., disable thinking) and enable default parameters (e.g., temperature) by model providersQznan · opened 42 days ago
- #6920 feat: add native Mistral chat providerZXLyyds100 · opened 5 days ago
- #6916 fix: Preserve data when splitting Upstash chunksArthur031221 · opened 10 days ago
Recently merged
- #6921 fix: require authentication for MCP server actionsCXP-shawn · merged 20 Oct 2026
- #6889 fix: gate MCP server actions behind isMcpEnabledaroh3006 · merged 20 Oct 2026
- #6917 docs: update MCP Market screenshot brandingCXP-shawn · merged 15 Oct 2026
- #6914 fix: remove OpenAI branding from template, docs and screenshotsCXP-shawn · merged 8 Oct 2026
The 30 most recently updated pull requests.
Top contributors
- Leizhenpeng31 commits · 31%
- Jeniter17 commits · 17%
- TIANQIAN123817 commits · 17%
- CXP-shawn9 commits · 9%
- DreamRivulet5 commits · 5%
Of the 100 most recent commits.
Issues
- Open
- 854
- issues and pull requests, as GitHub counts them
- Median time to close
- 164 days
- from 10 closed of the 35 latest
- Awaiting first reply
- 6
- of 25 open among the 35 latest
Most wanted
- #6157 [Bug] 硅基流动的 DeepSeek R1 / V3 模型 通过环境变量配置 API地址与Key 时 使用模型会返回 503 错误，但通过设置页面手动配置可正常使用8 reactions · 28 comments
- #6866 [Bug] 低级严重失误！！！卸载把我同级目录好多软件都给删掉了！！！2 reactions · 3 comments
- #6885 [Bug] nextchatweb容器被入侵了1 reaction · 2 comments
Rates come from the 35 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
License compatibility
Repo license: MIT · 25 deps checked · 0 potential conflicts.