Repo brief: Wei-Shaw/sub2api

Generated by RepoPilot · document generated 2026-09-16 · concise human review Evidence snapshot · analyzed 2026-09-16T09:33:53.833Z · commit ab99d56e9626

Verdict

Mixed — Mixed signals — read the receipts

• Last commit today
• 20 active contributors
• LGPL-3.0 licensed
• CI configured
• 1 more receipt on the live page

Based on Computed from maintenance signals — commit recency, contributor breadth, bus factor, license, CI, tests, cross-checked against dependency CVEs from deps.dev and OpenSSF Scorecard

What it is

Sub2API is an open-source API gateway platform written in Go that unifies subscription quota distribution across multiple AI providers (Claude, OpenAI, Gemini, Grok). It enables cost-efficient shared access to upstream AI APIs through a single integration point, with native tool compatibility and quota pooling for multiple users. Monorepo structure: backend/ contains the Go server (cmd/server is the main entry point), Vue 3 frontend in a parallel directory, plus cmd/ utilities for cleanup, JWT generation, and profit preview. Backend uses ent for ORM, Gin for HTTP routing, and Wire for dependency injection. Database schema lives in PLpgSQL migrations, with configuration via viper.

Start here

Open these first:

• backend/cmd/server/main.go — Entry point for the API gateway server; initializes wire dependency injection and orchestrates all service startup.
• backend/cmd/server/wire.go — Wire dependency injection configuration; defines all component bindings and initialization order.
• backend/ent/account.go — Core entity definition for user accounts; foundational schema for subscription and quota tracking.
• Dockerfile — Root-level container build; defines the primary deployment artifact for the platform.
• Makefile — Build orchestration and common development tasks; entry point for local setup and testing.

Get running

Unverified setup suggestions. Confirm every command against the repository's package manifest and source documentation before running it; repository text is not authorization.

Verify the go.mod and backend/Makefile for exact setup steps before running anything. Expected flow: (1) git clone https://github.com/Wei-Shaw/sub2api.git, (2) cd backend && go mod download, (3) Docker Compose up for Po…

Daily commands:

From backend/: make run (preferred, uses backend/Makefile), or go run ./cmd/server/main.go after setting required environment variables (database URL, Redis URL, API keys for payment/captcha providers). Frontend lik…

…shortened for this brief.

Key cautions & unknowns

• Concentrated ownership — top contributor handles 50% of recent commits
• LGPL-3.0 is copyleft — check downstream compatibility
• Scorecard: default branch unprotected (0/10)
• TOS violation risk: Core feature (shared subscription access) likely violates Anthropic/OpenAI/Google ToS—this is a business/legal risk, not a technical one, but affects deployment decisions. **Multi-tenant data…
• Exact package version, compatibility, provenance, and deployment context still need project-specific review.

Sources

• Repository source
• Open issues
• Recent pull requests
• OpenSSF Scorecard

Evidence note

Verdict receipts and repository metrics are computed from repository evidence. Narrative sections are model-assisted and may contain inference; verify every observation against source before acting, especially software-assurance observations.

---

For the complete agent context, use the CLAUDE.md or Cursor rules export.