jingyaogong / minimind
Repository health
Security, maintenance, dependencies and license for jingyaogong/minimind.
Security
25 dependencies checked (25 direct), pypi, via deps.dev. Findings apply only to the packages and versions checked.
- OSV-2026-646 · sentencepiece (direct)Heap-buffer-overflow in sentencepiece::unigram::Model::EncodeOptimizedAsk about this findingMODERATE
Security checks (RepoPilot estimate) · 2.9/10
OpenSSF has not scored this repository, so RepoPilot ran some of its checks from public GitHub data. Checks sorted from strongest to weakest.
- License filePermissive license: Apache-2.010/10
- Recent activityLast commit 31d ago8/10
- Code review before mergeOnly 0/20 recent PRs had requested reviewers2/10
- Tests run on pull requestsNo CI workflows detected0/10
- Automated dependency updatesNo Dependabot or Renovate config found0/10
- Security policyNo SECURITY.md found0/10
- Static analysis on commitsNo SAST workflow detected0/10
- Least-privilege CI tokensNo workflows to inspectnot scored
- Pinned dependenciesNo workflows to inspectnot scored
- Branch protectionInsufficient permissions to read branch protectionnot scored
Maintenance
Outside contributions: 20 of 100 external pull requests merged (29% of those decided), median 0 days to merge.From the 100 most recently updated pull requests, bots excluded.
Recent releases
- v221 Oct 2025 · 414 days after previous
- minimind-v12 Sept 2024
Pull requests
- Open
- 12
- 0 stale (60+ days, no update in 30)
- Merged
- 5
- of the 30 latest
- Median time to merge
- 21 days
- From bots
- 0
- not listed below
Open
- #891 fix: use SDPA for padded attention without a KV cacheScalwayssilence · opened 4 days ago
- #889 [fix] decide native-vs-transformers loading by directory name, not substringfjvbn2003 · opened 6 days ago
- #888 [fix] SFTDataset: keep assistant span when long prompt is truncateduphome · opened 8 days ago
- #886 docs: 说明 GRPO 的 Policy Loss 该怎么读（修 #884 的表述）Yi-111-a · opened 14 days ago
- #883 [fix] Keep streamed tool calls out of response contentcyanseek · opened 21 days ago
Recently merged
- #868 [fix] save final checkpoints after the residual accumulation stepDaoyuanLi2816 · merged 22 Sept 2026
- #867 [fix] align LoRA inference paths with training outputDaoyuanLi2816 · merged 22 Sept 2026
- #769 fix: guard against empty/filtered LLM responses in chat_api.pyqizwiz · merged 20 Sept 2026
- #821 [refactor] remove redundant rollout update_policy after torch.compilelycDragonSlayer · merged 20 Sept 2026
- #829 [fix] keep DPO preference-pair think formatting alignedDaoyuanLi2816 · merged 20 Sept 2026
The 30 most recently updated pull requests.
Top contributors
- jingyaogong79 commits · 79%
- Linxiushen4 commits · 4%
- DaoyuanLi28163 commits · 3%
- basil-k-aji-dev3 commits · 3%
- JustinGuese3 commits · 3%
Of the 100 most recent commits.
Issues
- Open
- 67
- issues and pull requests, as GitHub counts them
- Median time to close
- 1 day
- from 21 closed of the 40 latest
- Awaiting first reply
- 6
- of 19 open among the 40 latest
- Oldest open
- 2.1 years
Most wanted
- #504 【推荐内容】合集19 reactions · 3 comments
- #526 使用腾讯云Cloud Studio免费算力一键训练minimind14 reactions · 5 comments
- #436 感谢大佬的开源教程！这是我在学习 MiniMind[最新版本] 过程中记录的12篇笔记，包含了原理解释和代码shape注释。4 reactions · 5 comments
Rates come from the 40 most recently updated issues; the open count and oldest issue cover the whole repository.
Dependencies
Checked packages and import counts
These are the packages checked for known security issues, which may not be all of them. External imports are counted from the source code.
Packages pulled in by these were not checked.
License compatibility
Repo license: Apache-2.0 · 25 deps checked · 0 potential conflicts.