Rating certificate · AW/26-09/48126 Sept 2026
Not enough evidence
The Register / Multi-agent frameworks / MetaGPT
Register entry · Multi-agent frameworks · updated 26 Sept 2026
MetaGPT
MetaGPT turns a one-line requirement into user stories, designs, APIs and code by running LLM agents in fixed software-company roles under standard operating procedures ('Code = SOP(Team)'). It was influential in 2023-2024 research (ICLR papers, AFlow) and is MIT-licensed. The repository has had almost no activity since mid-2025; the team's commercial product MGX (MetaGPT X) has been rebranded Atoms, and several 2026 CVEs remain unpatched.
Dormant. De facto unmaintained, not formally deprecated: no release since v0.8.x (last GitHub release 2025-03-09), last commit 2026-01-21, an April 2026 'will this project no longer be maintained?' issue was auto-closed by a bot without a maintainer reply, and 2026 CVE reports note the project 'has not responded yet'. The company's focus moved to its commercial product MGX, rebranded Atoms.
What reviewers and users praise
- Not enough evidence yet.
What they criticise
- No releases since March 2025 and no maintainer response on issues in 2026
- Unpatched 2026 CVEs (eval injection, OS command injection, SSRF, unsafe deserialisation) in versions up to 0.8.2
Experts vs the crowdneeds both scores
Experts—
Crowd—
| Price | Free |
|---|---|
| Use it via | CLI, API |
| Runs on | macos, linux, windows |
| Licence | MIT |
| Updated | Evidence collected 26 Sept 2026 |
How the rating was worked out
Weights for Multi-agent frameworks: adoption 45%, experts 30%, crowd 25%. Fewer than two pillars have enough evidence. The method.
| Adoption & momentumweight 45% | 30 | GitHub stars 71k → 86 · PyPI monthly downloads 3.7k → 0 · 0 releases in 90 days → 0reach × 0.7 + momentum × 0.3 |
|---|---|---|
| Expertsindependent reviews · weight 30% | — | No independent reviews found |
| Crowdcommunity sample · weight 25% | — | Only 0 community items sampled (6 needed) |
| Rating | — | Not rated: fewer than two pillars have enough evidence. |
Editorial adjustment. Labelled dormant, not deprecated: the project has not been deprecated, but its last commit was 21 Jan 2026 and its last release Mar 2025 (GitHub, checked 26 Sep 2026). Incident-history grade reviewed under methodology revision 2 (see the trust section).
Trust & safety
Seven dimensions graded A–D from documented facts. Overall: not enough data.
n/e
Permission model
Not graded (de facto unmaintained).
n/e
Data access scope
Not graded.
n/e
Data storage
Not graded; runs locally.
n/e
Data retention & training
Not graded.
D
Incident history (24 months)
Ten CVEs published April-June 2026 (e.g. CVE-2026-5970 to CVE-2026-5974 eval/OS command injection, CVE-2026-6109/6110 eval injection, CVE-2026-6111 SSRF, CVE-2026-10566 deserialisation) affecting versions up to 0.8.1/0.8.2; advisories state the project 'has not reacted yet' and OSV lists no fixed version. Kept at D under revision 2: advisories state the project 'has not reacted yet' and OSV lists no fixed version (unresolved). source
n/e
Compliance
Not graded.
n/e
Transparency
MIT source public but effectively unmaintained. source
The experts
0 named independent reviews found; dated reviews from the last 12 months are scored.
- None found.
The crowd
0 coded posts.
Pricing
As published, checked 26 Sept 2026.
| Plan | Price | Notes |
|---|---|---|
| Open source | Free | MIT licence; model API costs separate. |
Recent changes
Sources
Every figure above traces to one of these, observed up to 26 Sept 2026.
- Commit history: last commit 2026-01-21, previous 2025-11-12
- Issue #2010 'About Project Update' (2026-04-14)
- From MetaGPT to Atoms (vendor page; MGX renamed Atoms; search snippet)
- KrASIA, 25 Jan 2026: From MetaGPT to Atoms (search snippet)
- Rework (Aug 2026): 'Open-source repo has gone quiet since January 2026; verify current activity before betting'