Repo brief: mobile-shell/mosh

Generated by RepoPilot · document generated 2026-09-14 · concise human review Evidence snapshot · analyzed 2026-09-14T09:07:11.547Z · commit decd9b705eb8

Verdict

Healthy — Strong maintenance signals

• Last commit 7w ago
• 16 active contributors
• Distributed ownership (top contributor 34% of recent commits)
• GPL-3.0 licensed
• 2 more receipts on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests

What it is

Mosh (Mobile Shell) is a remote terminal application written in C++ that replaces SSH for interactive sessions, adding support for intermittent connectivity, IP roaming, speculative local echo, and client-side prediction of server behavior. It solves the SSH problem of connection drops when switching networks (Wi-Fi to cellular) and high-latency link frustration by predicting keystrokes locally while awaiting server confirmation. Classic C++ project using GNU Autotools: configure.ac drives the build, m4/ contains macro logic, source code lives in src/ (inferred but not shown), platform-specific code in macosx/ and debian/, shell completions in conf/bash-completion. Build artifacts and CI…

Start here

Open these first:

• src/frontend/mosh-client.cc — Primary client entry point that handles terminal I/O, key input prediction, and speculative echo—core to Mosh's interactive…
• src/frontend/mosh-server.cc — Server daemon that manages session state, terminal emulation, and network synchronization with roaming clients.
• src/crypto/crypto.cc — Cryptographic layer implementing OCB encryption and HMAC authentication for secure session transport.
• src/crypto/base64.cc — Base64 encoding/decoding used throughout for key material and encrypted payload serialization.
• scripts/mosh.pl — SSH wrapper script that orchestrates client-server connection establishment and session handshake.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

git clone https://github.com/mobile-shell/mosh.git && cd mosh && ./autogen.sh && ./configure && make && make install. Requires autotools (autogen.sh), C++ compiler, and development libraries (curses, openssl inferred fr…

Daily commands:

After make: mosh-server runs on remote (invoked by SSH), mosh-client connects locally. For development: make check (inferred from Makefile.am), ./mosh-client user@host to test a connection. .clang-format present indicat…

…shortened for this brief.

Key cautions & unknowns

• GPL-3.0 is copyleft — check downstream compatibility
• 1. Environment variable security: mosh-client passes AES session keys via env vars; the README explicitly warns that some OSes don't isolate process environment variables from other users—audit this per target…
• Published-advisory coverage was unavailable for the captured dependencies.
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.