OpenClaw Maintainer Activity

Evidence report across 96 GitHub repos and maintainer Discord channels. Comments count when they are maintainer discussion; dependency-label backfill comments are filtered. Access roster: 59 people / 63 GitHub accounts.

Window
May 1-31, 2026
As of
Active
54/59
27 Core Staff / 19 Community / 8 Read-only
GitHub
43776
filtered events
Discord
23268
messages
PRs Opened
5741
4471 merged
Security
0
advisory signals
Repos
79
active in shown list
Overview

Global Summary

Codex synthesis

May activity was concentrated on OpenClaw core reliability, plugin/runtime infrastructure, channel integrations, security hardening, and maintainer coordination. The largest GitHub surface was openclaw/openclaw, with heavy spillover into GHSA mirror repos, Crabbox, ClawHub, Windows node, Gitcrawl, CrawlBar, ClawSweeper, and related tooling.

  • Core platform: openclaw/openclaw carried major gateway, daemon, Codex, session, queue, diagnostics, heartbeat, and transcript work, including quiet SSE receive streams, stale channel health cache refreshes, plugin registry reuse, async transcript I/O, session liveness diagnostics, and stuck-session abort experiments.
  • Plugins and packaging: configured plugin installs, runtime-deps handling, clawpack metadata, ClawHub artifacts, externalized channel plugin hints, pnpm update/build paths, and plugin audit behavior were repeatedly touched across openclaw/openclaw, clawhub, clawhub-security, and GHSA mirrors.
  • Security and release quality: security-oriented work covered pinned npm specs, redacted install failure URLs, workspace env injection defenses, managed proxy TLS validation, raw socket and exec-risk classification, GHSAs, release-branch planning, and upgrade survivor e2e lanes.
  • Channels and messaging: Discord, Slack, Telegram, WhatsApp, Feishu, Mattermost, Matrix, MS Teams, BlueBubbles, WebChat, voice-call, and RTT work focused on visible replies, message-tool behavior, cold-start latency, media sends, thread participation, proactive routing, and gateway read-aloud/dictation.
  • Tooling and platform support: Crabbox remote testing docs, Kova live-provider evidence, openclaw-windows-node parity, Gitcrawl pagination/rate-limit/embed work, CrawlBar settings polish, Nix packaging, and Crabfleet/Crabbox support broadened the operational surface.
  • Discord coordination: maintainer discussion centered in maintainers and clawtributors, with maintainer-security-ops covering advisory and security fix coordination, clawhub handling marketplace/security-pipeline topics, and ct-helping supporting contributor triage.
Hard Numbers

Activity Mix

codex summaries / 31 daily reports / 20 Discord mapping gaps
Commits
20270
GHSAs
0
Issue/PR comments
832
PR review comments
12
Discord messages
23268
Releases

Release Signals In This Window

10 active repos matched ReleaseBar for Monthly Report 2026-05 ยท 2 untracked here
Tracked active repos
10
Latest releases in window
0
Latest repo updates in window
1
No release recorded
1
Maintainers

People With Access

showing 54 of 54 active
@steipete
Peter Steinberger
OpenClaw Foundation
Core Staff adminsecurityrelease
openclaw: 6757openclaw-ghsa-prwc-c6w5-mmgr: 2842openclaw-ghsa-cmhr-vr63-2mxr: 1767crabbox: 422 #maintainers: 1853#clawtributors: 786#maintainer-security-ops: 20 owns: Core platform, daemon, agentsowns: Internal tools

Peter Steinberger had the largest visible footprint: 14,323 GitHub signals across openclaw/openclaw, GHSA mirrors, Crabbox, and Peekaboo, plus 2,670 Discord messages. Work centered on core platform, daemon/agent flows, Discord and gateway reliability, Codex diagnostics, plugin dependency handling, Crabbox remote testing docs, and high-volume maintainer/clawtributor coordination.

GitHub14323
Commits11157
GHSAs0
PRs2557
Issues22
Comments587
Discord2670
@vincentkoc
Vincent Koc
OpenClaw Foundation
Core Staff adminsecurityrelease
openclaw: 1964openclaw-ghsa-prwc-c6w5-mmgr: 971openclaw-ghsa-cmhr-vr63-2mxr: 486crabbox: 350 #maintainers: 2149#clawtributors: 197#maintainer-security-ops: 64 owns: Core platform, daemon, agentsowns: Internal toolsowns: Observability, Diag and Telemetryowns: Plugins

Vincent Koc recorded 4,986 GitHub signals and 2,446 Discord messages, focused on plugins, gateway hot paths, security hardening, doctor/runtime repair UX, device fallback behavior, Crabbox, CrawlBar, and GHSA mirror validation. Notable items include redacting git install failure URLs, keeping plain audit off plugin runtimes, bounding session transcript paths, and configured plugin install fixes.

GitHub4986
Commits4114
GHSAs0
PRs836
Issues3
Comments33
Discord2446
@shakkernerd
Gideon Adegbesan
OpenClaw Foundation
Core Staff
openclaw: 797openclaw-ghsa-prwc-c6w5-mmgr: 646openclaw-ghsa-cmhr-vr63-2mxr: 621Kova: 395 #maintainers: 811#clawtributors: 114#maintainer-offtopic: 11

Gideon Adegbesan produced 2,477 GitHub signals, mostly commits across openclaw/openclaw, GHSA mirrors, and Kova. The visible work emphasized Kova live-provider readiness, inherited auth, embedded agent latency evidence, gateway ingress evidence, and static plugin tool descriptor planning, with active Discord discussion in maintainers and clawtributors.

GitHub2477
Commits2428
GHSAs0
PRs44
Issues4
Comments1
Discord936
@obviyus
Ayaan Zaidi
Independent
Community Maintainer
openclaw: 384openclaw-ghsa-prwc-c6w5-mmgr: 146openclaw-ghsa-cmhr-vr63-2mxr: 52openclaw-rtt: 17 #maintainers: 744#clawtributors: 198#maintainer-offtopic: 19 owns: Channel Telegram

Ayaan Zaidi contributed 614 GitHub signals and 961 Discord messages, mainly around Telegram, RTT, and GHSA mirror follow-through. Work included fixing Telegram reply cold-start latency, cleaning RTT data, waiting between Telegram samples, and parsing Telegram scenario lists.

GitHub614
Commits394
GHSAs0
PRs202
Issues0
Comments18
Discord961
@giodl73-repo
Gio Della-Libera
Microsoft
Core Staff
openclaw: 415openclaw-ghsa-prwc-c6w5-mmgr: 79rfcs: 10openclaw-ghsa-cmhr-vr63-2mxr: 1

Gio Della-Libera showed 497 GitHub signals with no Discord activity in the evidence. Work focused on config include approvals, workspace `oc://` addressing, oc-path CLI support, tool metadata conformance, channel checks, and doctor health-check lint validation.

GitHub497
Commits176
GHSAs0
PRs228
Issues24
Comments69
Discord0
@joshavant
Josh Avant
OpenClaw Foundation
Core Staff security
openclaw: 244openclaw-ghsa-prwc-c6w5-mmgr: 62openclaw-ghsa-cmhr-vr63-2mxr: 13gogcli: 4 #maintainers: 467#clawtributors: 45#maintainer-security-ops: 35 owns: Security

Josh Avant had 325 GitHub signals and 562 Discord messages, with work across openclaw/openclaw, GHSA mirrors, gogcli, and openclaw.ai. Focus areas included published upgrade survivor coverage, generic dev version fallback, hatch TUI timeout bounds, plugin descriptor config-key memoization, and security-ops coordination.

GitHub325
Commits154
GHSAs0
PRs161
Issues1
Comments9
Discord562
@Patrick-Erichsen
Patrick Erichsen
OpenClaw Foundation
Core Staff release
clawhub: 272openclaw: 46clawhub-security: 14openclaw-ghsa-prwc-c6w5-mmgr: 8 #maintainers: 213#clawhub: 133#clawtributors: 16 owns: ClawHub

Patrick Erichsen logged 357 GitHub signals and 367 Discord messages, centered on ClawHub, clawhub-security, and plugin externalization. Work included ClawScan artifact prompt boundaries, ClawHub security eval pipelines, package update externalization, actionable externalized channel plugin hints, and clawhub channel discussion.

GitHub357
Commits142
GHSAs0
PRs208
Issues5
Comments2
Discord367
@Takhoffman
Tak Hoffman
Independent
Community Maintainer
clawsweeper: 301openclaw: 45openclaw-ghsa-prwc-c6w5-mmgr: 12clawhub: 1 #maintainers: 237#clawtributors: 38#maintainer-offtopic: 2

Tak Hoffman recorded 360 GitHub signals and 279 Discord messages, led by ClawSweeper and active-memory work in openclaw/openclaw. The main visible thread was active-memory behavior for Telegram forum topics, missing memory tools, and custom recall tools, plus maintainer/clawtributor coordination.

GitHub360
Commits104
GHSAs0
PRs227
Issues20
Comments9
Discord279
@pash-openai
Nik Pash
GitHub: @pash-openai / @pashpashpash
OpenAI
Core Staff
openclaw: 112openclaw-ghsa-prwc-c6w5-mmgr: 28openclaw-ghsa-cmhr-vr63-2mxr: 21clawsweeper: 11 #maintainers: 600#clawtributors: 242#maintainer-offtopic: 1 owns: Codex

Nik Pash had 172 GitHub signals and 843 Discord messages focused on Codex prompt and message-tool behavior. Work included happy-path prompt snapshots, defaulting Codex replies to the message tool, structured heartbeat responses, avoiding NO_REPLY prompts, and active design discussion in maintainers and clawtributors.

GitHub172
Commits83
GHSAs0
PRs88
Issues1
Comments0
Discord843
@RomneyDa
Dallin Romney
OpenClaw Foundation
Core Staff
openclaw: 218crabfleet: 34openclaw-ghsa-prwc-c6w5-mmgr: 29gitcrawl: 16 #maintainers: 167#clawtributors: 14#maintainer-security-ops: 4

Dallin Romney logged 327 GitHub signals and 185 Discord messages across openclaw/openclaw, Crabfleet, Gitcrawl, GHSA mirrors, and ClawSweeper. Work covered gateway reconnect log notices, embedded-run hung-provider abort cleanup with heap-leak validation, Gitcrawl transient embedding retry, GitHub pagination counts, and rate-limit handling.

GitHub327
Commits136
GHSAs0
PRs175
Issues3
Comments13
Discord185
@BunsDev
Val Alexander
Independent
Community Maintainer
openclaw: 221openclaw-ghsa-prwc-c6w5-mmgr: 40openclaw-ghsa-cmhr-vr63-2mxr: 29clawhub: 8 #maintainers: 71#clawtributors: 11#maintainer-security-ops: 8

Val Alexander had 299 GitHub signals and 96 Discord messages, focused on gateway RPC, workspace config, proxy validation, and async media delivery. Notable work included SDK-facing `tools.invoke`, artifacts API issue closures, `skipOptionalBootstrapFiles`, proxy validation, and agent-mediated async music delivery.

GitHub299
Commits113
GHSAs0
PRs180
Issues6
Comments0
Discord96
OpenClaw Foundation
Community Maintainer
openclaw: 64openclaw-ghsa-prwc-c6w5-mmgr: 25clawhub: 6openclaw-ghsa-cmhr-vr63-2mxr: 3 #maintainers: 489#clawtributors: 237#clawhub: 76

Jason Json recorded 101 GitHub signals and 843 Discord messages, with read-only maintainer/moderation access in the metadata. Work included PRs for avoiding model warmup on message actions, steering mid-turn prompts by default, npm git update spec prepacking, pnpm source update builds, ClawHub Ollama embeddings, Hermit moderation snippets, and contributor-help coordination.

GitHub101
Commits63
GHSAs0
PRs37
Issues0
Comments1
Discord843
@kevinslin
Kevin Lin
GitHub: @kevinlin-openai / @kevinslin
OpenAI
Core Staff
openclaw: 151openclaw-ghsa-prwc-c6w5-mmgr: 36openclaw-ghsa-cmhr-vr63-2mxr: 22rfcs: 5 #maintainers: 312#clawtributors: 24#maintainer-whois: 1

Kevin Lin had 220 GitHub signals and 337 Discord messages around OpenClaw agent, cron, Codex, and onboarding surfaces. Visible work included subagent thinking config patches, run diagnostics in cron status, Slack onboarding smoke tests, and discussion of skills polish and e2e channel coverage.

GitHub220
Commits108
GHSAs0
PRs109
Issues0
Comments3
Discord337
@shanselman
Scott Hanselman
Microsoft
Core Staff
openclaw-windows-node: 294 #maintainers: 22

Scott Hanselman logged 294 GitHub signals in openclaw-windows-node and 22 Discord messages. Work focused on Windows node parity: structural input validation for exec approvals, richer device health status, text-to-speech, tray cleanup, winnode CLI, and onboarding wizard updates.

GitHub294
Commits124
GHSAs0
PRs169
Issues0
Comments1
Discord22
@pgondhi987
Pavan Kumar Gondhi
NVIDIA
Core Staff security
openclaw: 177openclaw-ghsa-prwc-c6w5-mmgr: 31openclaw-ghsa-cmhr-vr63-2mxr: 18 #maintainer-security-ops: 10#maintainers: 9

Pavan Kumar Gondhi recorded 225 GitHub signals and 19 Discord messages, concentrated on security and infrastructure hardening. Work blocked unsafe workspace environment overrides for systemd, gcloud, Windows paths, and Homebrew, added state-directory protections, and coordinated security advisory fixes in maintainer-security-ops.

GitHub225
Commits86
GHSAs0
PRs138
Issues0
Comments1
Discord19
@jesse-merhi
Jesse Merhi
Atlassian
Core Staff security
openclaw: 58openclaw-ghsa-prwc-c6w5-mmgr: 15fs-safe: 11openclaw-ghsa-cmhr-vr63-2mxr: 10 #maintainers: 368#maintainer-security-ops: 46#clawtributors: 14

Jesse Merhi had 111 GitHub signals and 456 Discord messages, with a security-heavy focus. Work included managed proxy TLS hostname validation, IRC managed proxy docs, exec command risk highlighting, raw socket classification, Gateway proxy bypass narrowing, and discussion of malicious skills and security review topics.

GitHub111
Commits51
GHSAs0
PRs57
Issues0
Comments3
Discord456
@amknight
Alex Knight
Atlassian
Core Staff
openclaw: 137openclaw-ghsa-prwc-c6w5-mmgr: 33openclaw-ghsa-cmhr-vr63-2mxr: 15acpx: 12 #maintainers: 48#maintainer-security-ops: 5#maintainer-offtopic: 3 supports: Automation, hooks & jobs (cron)supports: Interfaces (CLI, TUI, Web UI)

Alex Knight recorded 204 GitHub signals and 56 Discord messages, mostly around channel persistence and gateway responsiveness. Work touched MS Teams sent-message markers, Matrix approval targets, Slack thread participation, Discord component registries, heartbeat active-hours scheduling, and async transcript I/O.

GitHub204
Commits90
GHSAs0
PRs114
Issues0
Comments0
Discord56
OpenClaw Foundation
Core Staff adminsecurityrelease
hermit: 45openclaw: 7community: 5clickclack: 2 #maintainers: 401#clawtributors: 104#maintainer-offtopic: 18

Shadow had 64 GitHub signals and 537 Discord messages, combining moderation/community work with small tooling changes. Visible work included Hermit moderation snippets and claim deduplication, ClickClack Pushover notifications, Discord RTT tracking, and maintainer/clawtributor coordination.

GitHub64
Commits53
GHSAs0
PRs10
Issues1
Comments0
Discord537
@brokemac79
brokemac79
N/A
Read-only maintainer
openclaw: 103clawsweeper: 22openclaw-ghsa-prwc-c6w5-mmgr: 9openclaw-ghsa-cmhr-vr63-2mxr: 3 #maintainers: 200#clawtributors: 5#maintainer-offtopic: 4

brokemac79 recorded 138 GitHub signals and 210 Discord messages under read-only maintainer metadata. Activity included issue work on runtime-deps install starvation and gateway install regeneration, PR/commit activity around context engine initialization, Feishu probing, and Discord discussion of CI stalls and changelog conflicts.

GitHub138
Commits35
GHSAs0
PRs50
Issues30
Comments23
Discord210
@galiniliev
Galin Iliev
Microsoft
Core Staff
openclaw: 144openclaw-ghsa-prwc-c6w5-mmgr: 20maintainers: 2crabbox: 1 #maintainers: 57#maintainer-security-ops: 3#clawtributors: 1

Galin Iliev had 167 GitHub signals and 61 Discord messages. Work included the maintainers repo LTS release branching proposal, safe gateway restart coordination, hook bootstrap handling, oc-path addressing substrate merge, and Crabbox Azure login/Windows sync changes.

GitHub167
Commits43
GHSAs0
PRs68
Issues48
Comments8
Discord61
@omarshahine
Omar Shahine
Microsoft
Core Staff
openclaw: 84imsg: 15openclaw-ghsa-prwc-c6w5-mmgr: 14rfcs: 9 #maintainers: 83#maintainer-offtopic: 7

Omar Shahine recorded 128 GitHub signals and 90 Discord messages, mainly around BlueBubbles and M365/workspace discussion. Work included UTI-aware audio attachment detection, inbound audio enrichment, reply-context API fallback, and related GHSA mirror commits.

GitHub128
Commits42
GHSAs0
PRs55
Issues22
Comments9
Discord90
@jalehman
Josh Lehman
Martian Engineering
Community Maintainer
openclaw: 86openclaw-ghsa-prwc-c6w5-mmgr: 20openclaw-ghsa-cmhr-vr63-2mxr: 11crabpot: 3 #maintainers: 92#clawtributors: 11#maintainer-offtopic: 4

Josh Lehman had 120 GitHub signals and 107 Discord messages, focused on agent/context-engine correctness and config reliability. Work included context engine initialization before subagent spawn prep, compaction model fallback, backup restore failure surfacing, context-engine prompt authority handling, and validation discussion in maintainers.

GitHub120
Commits51
GHSAs0
PRs64
Issues4
Comments1
Discord107
@sjf
Sarah Fortune
GitHub: @sjf / @sjf-oa
OpenAI
Core Staff
openclaw: 86openclaw-ghsa-prwc-c6w5-mmgr: 26openclaw-ghsa-cmhr-vr63-2mxr: 17fs-safe: 9

Sarah Fortune logged 138 GitHub signals with no Discord activity in the evidence. Work included Slack QA setup docs, shell completion profile guards, and fs-safe changes for workspace package metadata and symlink-safe file-store writes.

GitHub138
Commits75
GHSAs0
PRs62
Issues0
Comments1
Discord0
@mbelinky
Mariano Belinky
Independent
Community Maintainer
openclaw: 33clawpatch: 9openclaw-ghsa-cmhr-vr63-2mxr: 6openclaw-ghsa-prwc-c6w5-mmgr: 6 #maintainers: 234#maintainer-offtopic: 1

Mariano Belinky had 63 GitHub signals and 235 Discord messages. Visible work focused on Codex/skills checks and OAuth status labeling, including agent visibility in skills check and Codex OAuth status auth label fixes across GHSA mirrors.

GitHub63
Commits31
GHSAs0
PRs32
Issues0
Comments0
Discord235
@sallyom
Sally O'Malley
Red Hat
Core Staff
openclaw: 73openclaw-ghsa-prwc-c6w5-mmgr: 15openclaw-ghsa-cmhr-vr63-2mxr: 10clawbench: 2 #maintainers: 57#maintainer-offtopic: 18#maintainer-security-ops: 4

Sally O'Malley recorded 100 GitHub signals and 82 Discord messages, mostly on config, Docker, pairing, and secret-redaction hardening. Work included observe recovery write-failure logging, restoring python3 in the runtime image, redacting CLI argv secrets before audit persistence, stat-error handling in pairing, and Docker apt GPG pinning.

GitHub100
Commits44
GHSAs0
PRs53
Issues0
Comments3
Discord82
@joshp123
Josh Palmer
Independent
Community Maintainer
nix-openclaw: 67photoscrawl: 11clawsweeper: 7telecrawl: 7 #maintainers: 47#maintainer-offtopic: 6

Josh Palmer had 103 GitHub signals and 53 Discord messages, centered on nix-openclaw and packaging immutability. Work included immutable OpenClaw config, Darwin QMD bundle handling, opt-in local memory bundling, hardlink support, release pin decoupling, and discussion of declarative install breakage.

GitHub103
Commits88
GHSAs0
PRs12
Issues3
Comments0
Discord53
@hxy91819
Mason Huang
Tencent
Core Staff security
openclaw: 49openclaw-ghsa-prwc-c6w5-mmgr: 10maintainers: 8openclaw-ghsa-cmhr-vr63-2mxr: 5 #maintainers: 80#maintainer-security-ops: 14#maintainer-offtopic: 10

Mason Huang recorded 79 GitHub signals and 110 Discord messages, with security and CLI/plugin lifecycle work. Items included blocking gateway-owned package updates, adding redaction patterns for Tencent Cloud, Alibaba Cloud, HuggingFace, and Replicate keys, timing-safe Nextcloud Talk comparison, missing plugin ID rejection, and closed uninstall prompt handling.

GitHub79
Commits30
GHSAs0
PRs45
Issues1
Comments3
Discord110
@scoootscooob
Scott Fan
Paradigm
Community Maintainer
openclaw: 32clawbench: 11openclaw-ghsa-prwc-c6w5-mmgr: 4openclaw-ghsa-cmhr-vr63-2mxr: 3 #maintainers: 160#maintainer-offtopic: 22#clawtributors: 19

Scott Fan had 52 GitHub signals and 201 Discord messages. Work spanned gateway startup retry clarity, WhatsApp group visible replies, doctor group config persistence and migration, Gemini realtime voice parity for Twilio Meet joins, and ClawBench lifecycle wait hardening.

GitHub52
Commits17
GHSAs0
PRs35
Issues0
Comments0
Discord201
@onutc
Onur Solmaz
GitHub: @onutc / @osolmaz
Hugging Face
Core Staff
openclaw: 39acpx: 9maintainers: 7docs: 5 #maintainers: 108#clawtributors: 6#maintainer-meetups: 2 owns: Local Models

Onur Solmaz recorded 68 GitHub signals and 116 Discord messages, tied to local models and maintainer/docs work. Visible items included silent model fallback failure surfacing, provider conversation state error classification, testing CI policy docs, maintainer account updates, and Gitcrawl README formatting.

GitHub68
Commits16
GHSAs0
PRs31
Issues2
Comments19
Discord116
@openperf
Chunyue Wang
N/A
Read-only maintainer
openclaw: 59openclaw-ghsa-prwc-c6w5-mmgr: 16openclaw-ghsa-cmhr-vr63-2mxr: 7clawsweeper: 5 #maintainers: 8

Chunyue Wang had 87 GitHub signals and 8 Discord messages under read-only maintainer metadata. Work included canonicalizing package roots before runtime-deps hashing, restoring Ollama catalog-driven `num_ctx`, preserving agent state across z.ai-style embedded runs, elevated availability across approval follow-ups, and later Discord notes about resource-leak fixes.

GitHub87
Commits48
GHSAs0
PRs37
Issues0
Comments2
Discord8
@ngutman
Nimrod Gutman
Independent
Community Maintainer
openclaw: 48openclaw-ghsa-prwc-c6w5-mmgr: 8wacli: 2 #maintainers: 78#maintainer-offtopic: 14#maintainer-security-ops: 3

Nimrod Gutman recorded 58 GitHub signals and 95 Discord messages. Work focused on macOS approval dialog layout and session menu changes, group message-tool reply delivery, iOS gateway certificate recovery, and WhatsApp upload-file media send handling.

GitHub58
Commits22
GHSAs0
PRs29
Issues0
Comments7
Discord95
@altaywtf
Altay
put.io
Community Maintainer
openclaw: 43crabbox: 19openclaw-ghsa-cmhr-vr63-2mxr: 1openclaw-ghsa-prwc-c6w5-mmgr: 1 #maintainer-offtopic: 12#maintainers: 8#maintainer-security-ops: 1

Altay had 64 GitHub signals and 21 Discord messages. Work included agent failover attribution and cooldown behavior, duplicate user persistence suppression, ENOSPC watcher handling, pnpm 11 migration, and Crabbox activity.

GitHub64
Commits22
GHSAs0
PRs42
Issues0
Comments0
Discord21
@mcaxtr
Marcus Castro
Independent
Community Maintainer
openclaw: 45openclaw-ghsa-prwc-c6w5-mmgr: 5openclaw-ghsa-cmhr-vr63-2mxr: 2 #maintainers: 59#maintainer-offtopic: 7

Marcus Castro recorded 52 GitHub signals and 66 Discord messages. Work centered on prepared runtime migration, reply-path runtime reuse, WhatsApp media caption dedupe, outbound PN-to-LID resolution, and maintainer coordination.

GitHub52
Commits15
GHSAs0
PRs33
Issues1
Comments3
Discord66
@eleqtrizit
Agustin Rivera
NVIDIA
Core Staff security
openclaw: 47openclaw-ghsa-prwc-c6w5-mmgr: 6openclaw-ghsa-cmhr-vr63-2mxr: 1 #maintainer-security-ops: 6

Agustin Rivera had 54 GitHub signals and 6 Discord messages, concentrated in security-adjacent gateway, exec, memory, and browser export fixes. Visible work included rejecting malformed canvas request URLs, normalizing exec allowlist wildcard targets, enforcing wiki session visibility, and guarding current browser tab exports.

GitHub54
Commits22
GHSAs0
PRs31
Issues1
Comments0
Discord6
@bek91
Bek Akhmedov
Independent
Community Maintainer
openclaw: 36openclaw-ghsa-prwc-c6w5-mmgr: 2openclaw-ghsa-cmhr-vr63-2mxr: 1 #maintainers: 41#maintainer-offtopic: 2

Bek Akhmedov recorded 39 GitHub signals and 43 Discord messages, focused on Slack/plugin delivery issues. Work included plugin webhooks for Slack reply delivery, Slack mention-gating and thread participation fixes, documented delivery correlation issues, explicit mention target preservation, and bundled plugin resolution discussion.

GitHub39
Commits5
GHSAs0
PRs20
Issues11
Comments3
Discord43
@ai-hpc
NVIDIAN
N/A
Read-only maintainer
openclaw: 27openclaw-ghsa-prwc-c6w5-mmgr: 6openclaw-ghsa-cmhr-vr63-2mxr: 4

NVIDIAN had 37 GitHub signals and no Discord activity in the evidence. Work included opening gateway-owned package update blocking and Feishu group_topic message-tool reply PRs, plus closed/uninstall prompt handling activity mirrored across GHSA repos.

GitHub37
Commits17
GHSAs0
PRs18
Issues2
Comments0
Discord0
@drobison00
Devin Robison
NVIDIA
Core Staff security
openclaw: 64openclaw-ghsa-cmhr-vr63-2mxr: 5openclaw-ghsa-prwc-c6w5-mmgr: 5 #maintainer-security-ops: 2

Devin Robison recorded 31 GitHub signals and 2 Discord messages, all visible Discord activity in maintainer-security-ops. Work included dotenv and Windows trust-root environment hardening, Mattermost slash callback validation, config backup permission hardening, Windows command wrapper resolution, update path hardening, and discussion of architectural GHSA patterns.

GitHub31
Commits15
GHSAs0
PRs16
Issues0
Comments0
Discord2
@sliverp
Yuehua Li
Tencent
Core Staff
openclaw: 14openclaw-ghsa-prwc-c6w5-mmgr: 5openclaw-ghsa-cmhr-vr63-2mxr: 2 #maintainers: 41#maintainer-offtopic: 1

Yuehua Li had 21 GitHub signals and 42 Discord messages. Work focused on onboarding and channel listing behavior, including recovering externalized channel plugins from stale config, changelog entries, and listing bundled/catalog channels with configuration state.

GitHub21
Commits12
GHSAs0
PRs9
Issues0
Comments0
Discord42
@momothemage
Zhengnan Niu
Tencent
Core Staff
clawhub: 13clawsweeper: 2openclaw: 1 #maintainers: 45

Zhengnan Niu recorded 16 GitHub signals and 45 Discord messages, mainly in ClawHub. Work included slug validation for skills and souls, blocking owner undelete of moderator-hidden skills, disclosing suspicious hidden search results, full-text search recall, and ClawHub maintainer discussion.

GitHub16
Commits5
GHSAs0
PRs9
Issues0
Comments2
Discord45
@odysseus0
George Zhang
Independent
Community Maintainer
openclaw: 11crabpot: 4 #maintainers: 27

George Zhang had 15 GitHub signals and 27 Discord messages. Work included Weixin catalog discovery fixtures, forwarding install records to the channel catalog registry, splitting the Weixin catalog entry, and preserving raw reasoning streams while pushing formatting to the edge.

GitHub15
Commits2
GHSAs0
PRs13
Issues0
Comments0
Discord27
@jzakirov
Jamil Zakirov
N/A
Read-only maintainer
openclaw: 11openclaw-ghsa-cmhr-vr63-2mxr: 3openclaw-ghsa-prwc-c6w5-mmgr: 3

Jamil Zakirov had 17 GitHub signals and no Discord activity in the evidence. Work included Firecrawl self-hosted baseUrl closure, Telegram localized command menu descriptions, Telegram web_app inline keyboard support, plugin SDK hook type exports, and exposing tools in LLM input hook events.

GitHub17
Commits9
GHSAs0
PRs8
Issues0
Comments0
Discord0
@velvet-shark
Radek Sienkiewicz
Independent
Community Maintainer
openclaw: 9openclaw-ghsa-prwc-c6w5-mmgr: 2openclaw-ghsa-cmhr-vr63-2mxr: 1 #maintainers: 18

Radek Sienkiewicz recorded 12 GitHub signals and 18 Discord messages. Work focused on gateway/webchat reset behavior, Slack interactive reply wakeups, WhatsApp repeated tool preamble cleanup, and WhatsApp audio/media routing for transcript delivery.

GitHub12
Commits5
GHSAs0
PRs7
Issues0
Comments0
Discord18
@jacobtomlinson
Jacob Tomlinson
NVIDIA
Core Staff security
openclaw: 4openclaw-ghsa-cmhr-vr63-2mxr: 1openclaw-ghsa-prwc-c6w5-mmgr: 1 #maintainers: 17#maintainer-security-ops: 8

Jacob Tomlinson had 6 GitHub signals and 25 Discord messages, mostly security-ops discussion. Work included Mattermost setup URL collection in the wizard and opening a su-backed local user sandbox backend with a matching feature issue.

GitHub6
Commits3
GHSAs0
PRs2
Issues1
Comments0
Discord25
@lanzhi-lee
Lanzhi Lee
Xiaomi
Read-only maintainer
openclaw: 12

Lanzhi Lee recorded 12 GitHub signals and no Discord activity in the evidence. Work included PRs around reasoning stream wording, hyphenated subagent task names, case-insensitive session reset commands, removing Telegram-only reasoning copy, and an earlier plugin SDK env hook PR closure.

GitHub12
Commits3
GHSAs0
PRs7
Issues0
Comments2
Discord0
@huntharo
Harold Hunt
Giphy
Community Maintainer
openclaw: 5Tachikoma: 1 #maintainers: 12

Harold Hunt had 6 GitHub signals and 12 Discord messages. Visible GitHub activity was limited to closed PRs in Tachikoma and openclaw/openclaw, while Discord discussion focused on cost expectations for agentic workloads.

GitHub6
Commits0
GHSAs0
PRs6
Issues0
Comments0
Discord12
@visionik
Jonathan Taylor
Independent
Community Maintainer
openclaw: 2 #maintainers: 15#maintainer-security-ops: 1

Jonathan Taylor recorded 2 GitHub signals and 16 Discord messages. GitHub activity was limited to closing issues on Discord base64 image transcript storage and zizmor CI template-injection findings, with Discord snippets around document review and audience questions.

GitHub2
Commits0
GHSAs0
PRs0
Issues2
Comments0
Discord16
@Evizero
Christof Salis
Independent
Community Maintainer
openclaw: 2openclaw-ghsa-cmhr-vr63-2mxr: 1openclaw-ghsa-prwc-c6w5-mmgr: 1 #maintainers: 4#maintainer-offtopic: 3

Christof Salis had 4 GitHub signals and 7 Discord messages. Work centered on merging a gateway reset skills snapshot fix across openclaw/openclaw and GHSA mirrors, with light maintainer/offtopic discussion.

GitHub4
Commits3
GHSAs0
PRs1
Issues0
Comments0
Discord7
@mukhtharcm
Muhammed Mukhthar CM
Independent
Read-only maintainer
openclaw: 5

Muhammed Mukhthar CM recorded 5 GitHub signals and no Discord activity in the evidence. Visible work consisted of Mattermost PRs for turn-kernel migration, automatic ack reactions, `/model` dialog picker support, and a closed slash registration recovery item.

GitHub5
Commits0
GHSAs0
PRs5
Issues0
Comments0
Discord0
@vignesh07
Vignesh Natarajan
Snowflake
Community Maintainer
#maintainers: 9#maintainer-offtopic: 3

Vignesh Natarajan had no visible GitHub activity and 12 Discord messages. Discord discussion focused on slug redirects, plugin discoverability concerns, and an openclaw issue reference.

GitHub0
Commits0
GHSAs0
PRs0
Issues0
Comments0
Discord12
@gumadeiras
Gustavo Madeira Santana
Yale University
Community Maintainer
openclaw: 1 #maintainers: 2

Gustavo Madeira Santana had 1 GitHub signal and 2 Discord messages. GitHub activity was limited to a closed mock-openai QA channel regression PR, with brief maintainer-channel discussion.

GitHub1
Commits0
GHSAs0
PRs1
Issues0
Comments0
Discord2
@alauppe
AndyML
Independent
Read-only moderation moderation
#clawtributors: 5

AndyML had no visible GitHub activity and 5 Discord messages in clawtributors. The visible Discord activity concerned a Novita.ai event, a native inference provider PR, and process guidance for official provider PRs.

GitHub0
Commits0
GHSAs0
PRs0
Issues0
Comments0
Discord5
No matching active maintainer in this report.

No visible activity

5 maintainers
  • @Asleep123 - Asleep - Independent
  • @julianengel - Julian Engel - Independent
  • @Spectorian - Nir Paz - NVIDIA
  • @purpshell - Rajeh Taher - Independent
  • @SinOfStrife - Strife - Independent