Skip to content

Instantly share code, notes, and snippets.

@dims

dims/external-contributor-report.md

Created June 3, 2026 14:40
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save dims/babbf3a37068402a1ef9c4d5eddf53d0 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save dims/babbf3a37068402a1ef9c4d5eddf53d0 to your computer and use it in GitHub Desktop.
Download ZIP
OpenShell (NVIDIA/OpenShell) — External Contributor & DCO-Hygiene Report (2026-05-26)
Raw
external-contributor-report.md

External Contributor & DCO-Hygiene Report — nvidia/OpenShell

  • Generated: 2026-05-26
  • Repository: nvidia/OpenShell (working copy: /Users/dsrinivas/go/src/github.com/nvidia/OpenShell)
  • Total commits analyzed (full main history): 754
  • Total unique commit-author emails: 58
  • Total unique GitHub handles (resolved): 51 (excluding bots)

Methodology summary

Authorship metadata was pulled via git log --format='%H|%an|%ae|%ai|%s'. DCO state was determined by scanning each commit body (git log --format='COMMIT:%H%n%B%n---END---') for a Signed-off-by: trailer. GitHub handles were resolved from <id>+<handle>@users.noreply.github.com and, for plain emails, from gh api repos/NVIDIA/OpenShell/commits/<sha> (.author.login). For each handle a gh api /orgs/NVIDIA/members/<handle> request established NVIDIA-org membership (HTTP 204 = member, 404 = non-member). For each NVIDIA candidate, a helios-cli user get <login> (and user search --filter-email) lookup attempted to resolve the official NVIDIA email. LinkedIn and employer details came from gh api /users/<handle> (.company, .location, .bio) and targeted web searches. PR lists were fetched with gh pr list --repo NVIDIA/OpenShell --author <handle> --state all.

Classification tier (first match wins): (1) Helios match → NVIDIA; (2) commit email is @nvidia.com → NVIDIA; (3) gh api /orgs/NVIDIA/members/<handle> returns 204 → NVIDIA; (4) otherwise external.

1. DCO Status Summary

Category Commits Signed-off-by Unsigned
External (human, non-NVIDIA) 128 56 72
NVIDIA-affiliated (NV email + NV-org members with personal email) 617 111 506
Bots (dependabot) 9 9 0
Total 754 176 578

External DCO hygiene: 44% (56/128) signed. ⚠️ NVIDIA DCO hygiene: 18% (111/617) signed. ⚠️

DCO checks are not blocking on this repo, so internal hygiene is uneven and external compliance is also imperfect (unlike some other NVIDIA OSS projects where the external rate is 100%). The unsigned commits are heavily concentrated in a small number of accounts — see Section 4 for the top-10 NVIDIA committers (which contain the bulk of the unsigned total) and Section 7 for per-account observations.

Unsigned external contributors:

  • Mesut Oezdil (mesutoezdil) — 14/21 unsigned
  • Seth Jennings (sjenning) — 18/18 unsigned
  • Russell Bryant (russellb) — 6/13 unsigned
  • Florent BENOIT (benoitf) — 3/11 unsigned
  • Derek Carr (derekwaynecarr) — 1/11 unsigned
  • Eric Curtin (ericcurtin) — 7/8 unsigned
  • Adam Miller (maxamillion) — 5/8 unsigned
  • mjamiv (mjamiv) — 4/7 unsigned
  • Mrunal Patel (mrunalp) — 3/4 unsigned
  • Parth Sareen (ParthSareen) — 3/3 unsigned
  • Adel Zaalouk (zanetworker) — 1/2 unsigned
  • Zygmunt Krynicki (zyga) — 1/2 unsigned
  • Florencio Cano (fcanogab) — 1/2 unsigned
  • Vegard Stikbakke (vegarsti) — 1/1 unsigned
  • Arnon Rotem-Gal-Oz (Arnonrgo) — 1/1 unsigned
  • Vinicius Corrêa (vcorrea-ppc) — 1/1 unsigned
  • Khai Le (khaile) — 1/1 unsigned
  • Hector Flores (htekdev) — 1/1 unsigned

2. Confirmed Non-NVIDIA Contributors

Ordered by commit count (descending).

2.1 Mesut Oezdil — mesutoezdil

  • Display name: Mesut Oezdil

  • GitHub handle: mesutoezdil

  • Commit email: 114185853+mesutoezdil@users.noreply.github.com

  • DCO status: ⚠️ 7/21 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Adfinis GmbH

  • Employer / location: Adfinis GmbH / Germany

  • Website/blog: https://linktr.ee/mesutoezdil

  • GitHub account: created 2022-09-22, 64 public repos

  • Active window in OpenShell: 2026-04-29 → 2026-05-26

  • PRs:

    PR Title State Merged
    #1547 fix(python): raise SandboxError instead of FileNotFoundError or KeyError merged 2026-05-26
    #1546 fix(scripts): use TMPDIR-aware mktemp template in shell scripts closed —
    #1545 chore(helm): add missing SPDX header to gateway-config template merged 2026-05-25
    #1544 ci: pin azure/setup-helm and helm/kind-action to commit SHAs merged 2026-05-25
    #1543 docs(kubernetes): note that Sandbox volumeClaimTemplates is immutable open —
    #1542 docs(providers): note that ANTHROPIC_API_KEY requires an API account, not a subscription open —
    #1541 ci(docs): publish versioned Fern docs on release closed —
    #1540 docs(kubernetes): add RBAC section to setup page open —
    #1539 fix(scripts): replace mapfile with bash 3.2-compatible read loop in helm-k3s-local merged 2026-05-26
    #1413 fix(ci): eliminate image-tag race between concurrent workflows merged 2026-05-20
    #1412 fix(sandbox): add mechanistic smoke test for L4 deny and document the L4/L7 split open —
    #1398 ci: extend artifact attestations to all release binaries merged 2026-05-18
    #1382 fix(sandbox): allow HEAD where GET is permitted in L7 policy merged 2026-05-15
    #1367 feat(ci): add helm-unittest mise task and CI step merged 2026-05-13
    #1366 docs: replace --sync with --upload . in sync-files example merged 2026-05-14
    #1310 fix(driver-kubernetes): propagate log_level as OPENSHELL_LOG_LEVEL env var merged 2026-05-11
    #1309 docs(helm): document supervisor.sideloadMethod and sandboxNamespace default merged 2026-05-11
    #1250 docs(kubernetes): add RBAC reference page closed —
    #1247 docs(helm): fix overlay values paths after ci/ reorganization merged 2026-05-07
    #1246 docs: fix broken policy-engine anchor in policies page merged 2026-05-07
    #1216 docs: replace generic Index link text with actual page titles merged 2026-05-06
    #1215 docs(arch): update Kubernetes supervisor delivery to reflect init-container pattern closed —
    #1214 docs: add supervisor image Helm values to manage-gateways reference closed —
    #1205 docs: fix OpenCode capitalization in provider types table merged 2026-05-06
    #1204 docs: fix tutorials card link on index page merged 2026-05-06
    #1180 docs: add missing provider types to supported providers table merged 2026-05-06
    #1141 docs: add Debian package section to support matrix closed —
    #1139 docs: add Debian package install option to quickstart closed —
    #1138 docs: add Debian package install option to quickstart closed —
    #1137 docs: fix tutorial links pointing to wrong path merged 2026-05-02
    #1136 docs: document --drivers flag and compute driver auto-detection closed —
    #1135 docs: fix broken link and capitalise GitHub correctly merged 2026-05-02
    #1134 docs: fix broken link and capitalise GitHub correctly closed —
    #1125 refactor(sandbox): remove dead relay_response_to_client wrapper merged 2026-05-01
    #1124 fix(net): catch IPv4-mapped blocked ranges in is_always_blocked_net closed —
    #1032 fix(net): catch IPv4-mapped blocked ranges in is_always_blocked_net merged 2026-04-29
    #1023 fix(net): catch IPv4-mapped blocked ranges in is_always_blocked_net closed —

  • Commit hashes: 4510b0d1, 76093e78, c0352272, 721c39f1, 56ba935e, a1a5a015, fd7df484, cdfd548a, 57060039, d2321a2c, b9b8bc3f, 957daa0a, 96d909d9, 1c317646, 283defd2, 702bb56f, 2b13bfa4, 863d2a2e, cd702496, 4848c409, 88508a01

2.2 Seth Jennings — sjenning

  • Display name: Seth Jennings

  • GitHub handle: sjenning

  • Commit email: sjenning@redhat.com

  • DCO status: ⚠️ 0/18 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Red Hat

  • Employer / location: Red Hat / Austin, TX

  • GitHub account: created 2010-11-23, 113 public repos

  • Active window in OpenShell: 2026-04-21 → 2026-05-21

  • PRs:

    PR Title State Merged
    #1489 fix(cli): add auth and TLS support to completion client merged 2026-05-21
    #1436 feat(k8s): make default workspace PVC storage size configurable merged 2026-05-19
    #1405 feat(tui): add OIDC authentication support merged 2026-05-15
    #1373 feat(helm): support custom CA for OIDC issuer TLS verification merged 2026-05-14
    #1371 fix(images): remove image-specific owner and mode set for gateway binary merged 2026-05-13
    #1351 feat(server): separate HTTPS from mTLS authentication merged 2026-05-15
    #1342 fix(cli): use OS trust store for reqwest TLS verification merged 2026-05-12
    #1249 docs(helm): add agent sandbox prerequisite to Helm README merged 2026-05-07
    #1240 docs(helm): add install instructions for OpenShift merged 2026-05-07
    #1237 feat(helm): set nameOverride to openshell merged 2026-05-07
    #1212 feat(cli): add --gateway-insecure flag to skip TLS certificate verification merged 2026-05-06
    #1203 fix(kube): add RBAC rule for sandbox finalizer updates merged 2026-05-06
    #1088 feat(server): add auto-detection of compute driver at startup merged 2026-05-01
    #937 fix(skills): remove --assignee @me from gh pr/issue create commands merged 2026-04-23
    #920 feat(server): add Prometheus metrics infrastructure and gRPC/HTTP request metrics merged 2026-04-23
    #907 fix(k8s-driver): use dedicated kube client without read_timeout for watches merged 2026-04-21
    #903 feat(server): serve health endpoints on separate unauthenticated port merged 2026-04-21
    #895 feat(server): add request-level logging via TraceLayer merged 2026-04-21

  • Commit hashes: ba56206f, bd113957, 42c3cf63, 8405ceaa, 3b7d3093, ea4915ad, bb4dbd7c, df8ac94d, 8594cb71, 916a9d96, d2e80d1c, afcd3a9e, 0c8c7230, 52c77570, c94cddbf, c8bf387a, c527341d, c143c81f

2.3 Russell Bryant — russellb

  • Display name: Russell Bryant

  • GitHub handle: russellb

  • Commit email: russell.bryant@gmail.com

  • DCO status: ⚠️ 7/13 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Red Hat, Inc., @vllm-project

  • Employer / location: Red Hat, Inc., @vllm-project / Charleston, SC, USA

  • GitHub account: created 2010-06-19, 144 public repos

  • Active window in OpenShell: 2026-05-09 → 2026-05-21

  • PRs:

    PR Title State Merged
    #1483 fix(server): respect OPENSHELL_PODMAN_SOCKET env var in embedded driver merged 2026-05-21
    #1439 test(e2e): close Podman driver test coverage gaps merged 2026-05-19
    #1430 feat(e2e): enable mTLS for Podman compute driver merged 2026-05-18
    #1401 refactor(sandbox): replace iptables with nftables for network policy enforcement merged 2026-05-18
    #1391 fix(vm): enable NFT_LOG kernel module for nftables bypass detection merged 2026-05-15
    #1389 fix(vm): make /sandbox chown non-fatal for virtiofs rootless hosts merged 2026-05-14
    #1388 fix(build): add z3 include path for RHEL/Fedora bindgen compatibility merged 2026-05-19
    #1370 feat(vm): fall back to Podman socket when Docker is unavailable merged 2026-05-15
    #1369 fix(server): downgrade expected connection teardown errors to debug merged 2026-05-14
    #1368 test(e2e): add bypass detection test for sandbox REJECT rules merged 2026-05-14
    #1329 fix(sandbox): remove DNS resolution from mechanistic mapper to prevent data exfiltration merged 2026-05-15
    #1288 fix(gateway): update Podman supervisor build task name merged 2026-05-09
    #1287 docs: document OPENSHELL_SSH_HANDSHAKE_SECRET in Getting Started merged 2026-05-09

  • Commit hashes: af60d4e4, 57a80ed2, bbfcac8a, 94025d83, 0dee90ab, c27dd88a, 44e843ed, 9a7c0df0, 3cd238ab, c5d1d76d, 65a3a7c2, 04a39cab, af753748

2.4 Florent BENOIT — benoitf

  • Display name: Florent BENOIT

  • GitHub handle: benoitf

  • Commit email: fbenoit@redhat.com

  • DCO status: ⚠️ 8/11 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Red Hat, Inc.

  • Employer / location: Red Hat, Inc. / unknown

  • Website/blog: http://linkedin.com/in/florentbenoit

  • Twitter: @florentbenoit

  • GitHub account: created 2010-10-12, 400 public repos

  • Active window in OpenShell: 2026-04-23 → 2026-05-21

  • PRs:

    PR Title State Merged
    #1500 feat(cli): add JSON/YAML output format to gateway list merged 2026-05-21
    #1493 fix(scripts): use portable lowercase in normalize_bool for Bash 3.2 merged 2026-05-21
    #1422 feat(cli): add -o json/yaml output format to sandbox list merged 2026-05-18
    #1334 fix(scripts): replace mapfile with bash 3.2-compatible read loop merged 2026-05-15
    #1331 feat(exec): add bidirectional streaming for interactive TTY sessions merged 2026-05-15
    #1311 fix(vm): use bash 3.2-safe empty array expansion in supervisor build merged 2026-05-11
    #1176 fix(vm): correct /sandbox ownership when rootfs is built by non-root host merged 2026-05-11
    #999 fix(podman): use podman machine socket path on macOS merged 2026-04-27
    #986 fix(deps): add missing cargo-zigbuild dependency for macOS cross-compilation merged 2026-04-27
    #939 feat(openshell-vm): add tty support for exec merged 2026-04-29
    #923 chore(mise): replace deprecated ubi: prefix by github: prefix merged 2026-04-23

  • Commit hashes: b19a3dc6, aee74437, 385855c8, c0ffa933, 764d9306, b33bbd21, a1fb9bd9, 442b0b6b, 0cbd2d6c, b93a3d86, 9e8610f6

2.5 Derek Carr — derekwaynecarr

  • Display name: Derek Carr

  • GitHub handle: derekwaynecarr

  • Commit email: decarr@redhat.com

  • DCO status: ⚠️ 10/11 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Red Hat

  • Employer / location: Red Hat / Raleigh, NC

  • GitHub account: created 2013-12-20, 118 public repos

  • Active window in OpenShell: 2026-04-24 → 2026-05-21

  • PRs:

    PR Title State Merged
    #1577 feat(gateway): add reconciler lease for HA multi-replica deployments open —
    #1565 refactor(proto): move phase and current_policy_version into status open —
    #1451 feat(agents): add LSM compatibility checks to review and spike skills merged 2026-05-20
    #1449 fix(sandbox): skip fork-exec socket ambiguity test on SELinux merged 2026-05-21
    #1417 fix(sandbox): stabilize forked socket owner test merged 2026-05-18
    #1298 feat(driver-kubernetes): disable service account token auto-mounting merged 2026-05-10
    #1292 feat(db) resource version cas merged 2026-05-18
    #1291 fix(docker): add SELinux labeling to bind mounts merged 2026-05-09
    #1207 fix(scripts): eliminate xargs subshell dependency in docker-cleanup.sh merged 2026-05-07
    #978 fix(e2e): use high UID range to avoid host user conflicts merged 2026-04-27
    #977 fix(scripts): handle docker cleanup when no containers are running merged 2026-04-27
    #948 fix(e2e): add /dev/urandom to provider test sandbox policy merged 2026-04-24
    #919 feat(server): add object meta convention to top-level objects merged 2026-04-27

  • Commit hashes: 87f50f5e, f8fb3821, 5e28ea3a, de9dce04, d45c1a70, 8d837762, 24cbaa11, b4c7bc46, 7f16d60e, 3c873937, 2d9e5326

2.6 Eric Curtin — ericcurtin

  • Display name: Eric Curtin

  • GitHub handle: ericcurtin

  • Commit email: eric.curtin@docker.com

  • DCO status: ⚠️ 1/8 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Docker, Inc

  • Employer / location: Docker, Inc / unknown

  • Website/blog: https://www.linkedin.com/in/curtine

  • GitHub account: created 2012-05-01, 260 public repos

  • Active window in OpenShell: 2026-05-12 → 2026-05-26

  • PRs:

    PR Title State Merged
    #1526 refactor: deduplicate shared code across ocsf builders and driver crates merged 2026-05-26
    #1499 refactor: deduplicate repeated patterns across crates merged 2026-05-21
    #1495 refactor(server): extract shared relay-await and sandbox-scan helpers merged 2026-05-21
    #1474 refactor: deduplicate shared driver and provider constants merged 2026-05-20
    #1419 docs(container-gateway): fix Docker driver setup for containerized gateway open —
    #1399 refactor: deduplicate shared test helpers merged 2026-05-19
    #1381 refactor(core): eliminate duplicate utilities across crates merged 2026-05-14
    #1348 feat(cli): add --volume flag for host directory bind mounts in Docker sandboxes closed —
    #1321 docs(installation): add container gateway page with docker run and compose examples merged 2026-05-15
    #1313 feat(providers): add Docker Agent provider open —
    #1312 feat(providers): add Docker Model Runner provider open —
    #1290 fix(providers): read opencode config file during credential discovery merged 2026-05-12
    #528 fix(sandbox): real creds when no tls:terminate closed —
    #526 fix(sandbox): real creds when no tls:terminate closed —
    #525 fix(sandbox): real creds when no tls:terminate closed —

  • Commit hashes: df5a8b94, 6deb1f00, 9f8edb5a, 10af3e60, b332ffdf, e3f009fb, 5620c8b2, 9857fa19

2.7 Adam Miller — maxamillion

  • Display name: Adam Miller

  • GitHub handle: maxamillion

  • Commit email: admiller@redhat.com

  • DCO status: ⚠️ 3/8 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Red Hat

  • Employer / location: Red Hat / Fort Worth, TX

  • Website/blog: https://maxamillion.sh

  • GitHub account: created 2011-06-09, 487 public repos

  • Active window in OpenShell: 2026-04-24 → 2026-05-21

  • PRs:

    PR Title State Merged
    #1568 feat(providers): add Google Vertex AI inference provider open —
    #1507 fix(packaging): add upgrade migration docs and podman socket retry merged 2026-05-21
    #1438 fix(rpm): restore 0.0.0.0 bind address for Podman via default gateway.toml merged 2026-05-18
    #1426 feat(rpm): replace init-pki.sh with openshell-gateway generate-certs merged 2026-05-18
    #1403 chore: remove SSH handshake secret residuals and fix agent memory merged 2026-05-15
    #1279 fix(sandbox): exempt host gateway from SSRF block for rootless Podman merged 2026-05-15
    #1220 refactor: generalize container build tooling for Docker and Podman compatibility open —
    #1218 feat(rpm): use :dev image tag for non-release Packit builds merged 2026-05-07
    #1126 feat(rpm): add RPM packaging with Packit/COPR and GHA release publishing merged 2026-05-05
    #904 Openshell driver podman merged 2026-04-24

  • Commit hashes: d44d8a1e, d8b84773, 5bf22fd6, f672f75e, 63bdcd13, 71209e6a, 436c59a2, f5b0ad71

2.8 mjamiv — mjamiv

  • Display name: mjamiv

  • GitHub handle: mjamiv

  • Commit email: 142179942+mjamiv@users.noreply.github.com

  • DCO status: ⚠️ 3/7 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: (empty)

  • Employer / location: Unknown / unknown

  • GitHub account: created 2023-08-13, 33 public repos

  • Active window in OpenShell: 2026-04-15 → 2026-05-22

  • PRs:

    PR Title State Merged
    #1562 test(sandbox): reject malformed proxy hostnames open —
    #1561 fix(cli): preserve symlinks during sandbox upload open —
    #1560 fix(sandbox): trust exact declared private endpoints open —
    #1497 Make sandbox child nproc limit configurable open —
    #1418 test(sandbox): cover inference stream truncation SSE errors merged 2026-05-18
    #1410 fix(cli): add json output for policy get merged 2026-05-22
    #1304 fix(sandbox): allow first-label L7 host wildcards merged 2026-05-21
    #1142 fix: satisfy clippy on docker gateway routing PR closed —
    #976 fix(cli): preserve directory basename when uploading to sandbox (#885) closed —
    #952 fix(cli): preserve source directory on sandbox upload merged 2026-04-24
    #844 fix(sandbox): strip " (deleted)" suffix from unlinked /proc//exe paths merged 2026-04-17
    #843 fix(core): exclude vm-dev tag from git describe version glob merged 2026-04-15
    #842 fix(sandbox): escape control characters in format_sse_error merged 2026-04-15

  • Commit hashes: 1a57519f, ac3fc481, ae7e9010, 0d301d57, a54758cd, 528fb291, 686b24da

2.9 Mrunal Patel — mrunalp

  • Display name: Mrunal Patel

  • GitHub handle: mrunalp

  • Commit emails: mrunalp9@outlook.com, mrunalp@gmail.com

  • DCO status: ⚠️ 1/4 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Red Hat, Inc

  • Employer / location: Red Hat, Inc / unknown

  • Twitter: @mrunalp

  • GitHub account: created 2009-02-12, 121 public repos

  • Active window in OpenShell: 2026-04-17 → 2026-05-11

  • PRs:

    PR Title State Merged
    #1300 feat(k8s): support ImageVolumeSource for supervisor sideload merged 2026-05-11
    #983 feat(sandbox): add Kubernetes user namespace isolation merged 2026-05-08
    #935 feat(auth): add OIDC/Keycloak authentication with RBAC and scope-based permissions merged 2026-04-30
    #877 docs(contributing): add bash shell setup example for mise merged 2026-04-17

  • Commit hashes: 5c3015a6, 08450542, 1f35abbe, 6184d24e

2.10 LateNightHackathon — latenighthackathon

  • Display name: LateNightHackathon

  • GitHub handle: latenighthackathon

  • Commit email: 256481314+latenighthackathon@users.noreply.github.com

  • DCO status: ✅ 3/3 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: LateNightHackathon

  • Employer / location: LateNightHackathon / DFW, TX

  • GitHub account: created 2026-01-22, 7 public repos

  • Active window in OpenShell: 2026-03-29 → 2026-03-30

  • PRs:

    PR Title State Merged
    #1350 fix(grpc): allow credential rotation when legacy provider.type exceeds current limit open —
    #871 fix(cluster): declare openshell namespace via k3s auto-manifest closed —
    #671 fix(l7): reject requests with both CL and TE headers in inference parser (CWE-444) merged 2026-03-30
    #669 fix(sandbox): skip non-existent paths instead of abandoning Landlock ruleset closed —
    #666 fix(proxy): add L7 inspection to forward proxy path merged 2026-03-30
    #665 fix(install): make checksum verification mandatory closed —
    #663 fix(l7): reject duplicate Content-Length headers to prevent request smuggling (CWE-444) merged 2026-03-29
    #662 fix(install): validate redirect URL origin before trusting resolved version closed —
    #660 sec(l7): reject duplicate Content-Length headers to prevent request smuggling (CWE-444) closed —
    #659 sec(install): validate redirect URL origin before trusting resolved version closed —

  • Commit hashes: 0ac1fbd2, 94fbb643, 38655a65

2.11 Parth Sareen — ParthSareen

  • Display name: Parth Sareen

  • GitHub handle: ParthSareen

  • Commit email: parth.sareen@ollama.com

  • DCO status: ⚠️ 0/3 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: @ollama

  • Employer / location: @ollama / unknown

  • Website/blog: parthsareen.com

  • Twitter: @parthsareen

  • GitHub account: created 2017-06-11, 88 public repos

  • Active window in OpenShell: 2026-03-17 → 2026-03-20

  • PRs:

    PR Title State Merged
    #513 docs(ollama): fix references to renamed tutorial file merged 2026-03-20
    #511 docs(ollama): update ollama tutorial and references to match latest ollama features merged 2026-03-20
    #383 docs(ollama): add ollama to community sandboxes catalog and supported agents merged 2026-03-17
    #373 docs(ollama): add ollama to community sandboxes catalog and supported agents closed —

  • Commit hashes: efb80e73, ba19aade, 86a8fa13

2.12 Adel Zaalouk — zanetworker

  • Display name: Adel Zaalouk

  • GitHub handle: zanetworker

  • Commit emails: adel.zalok.89@gmail.com, azaalouk@redhat.com

  • DCO status: ⚠️ 1/2 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Red Hat

  • Employer / location: Red Hat / Germany

  • Website/blog: http://adelzaalouk.me

  • Twitter: @zanetworker

  • GitHub account: created 2013-04-18, 161 public repos

  • Active window in OpenShell: 2026-05-20 → 2026-05-22

  • PRs:

    PR Title State Merged
    #1538 fix(cli): roll back gateway registration when auth fails during gateway add open —
    #1535 fix(cli): propagate --gateway-insecure to OIDC auth flows merged 2026-05-22
    #1475 fix(server): add ConnectSupervisor and RelayStream to SANDBOX_METHODS merged 2026-05-20

  • Commit hashes: bdaa08fb, f0f17bf4

2.13 Colin Walters — cgwalters

  • Display name: Colin Walters

  • GitHub handle: cgwalters

  • Commit email: walters@verbum.org

  • DCO status: ✅ 2/2 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Red Hat, Inc.

  • Employer / location: Red Hat, Inc. / MA, USA

  • Website/blog: https://blog.verbum.org

  • Twitter: @cgwalters

  • GitHub account: created 2010-04-14, 480 public repos

  • Active window in OpenShell: 2026-05-05 → 2026-05-21

  • PRs:

    PR Title State Merged
    #1505 refactor(sandbox,driver-vm): Start moving to rustix (esp over libc unsafe) merged 2026-05-21
    #1496 refactor(sandbox): remove binary path allowlisting entirely closed —
    #1089 ci: add Podman e2e workflow and gate closed —
    #1077 Two podman driver fixes merged 2026-05-05

  • Commit hashes: b77b60b3, e7f965a9

2.14 Zygmunt Krynicki — zyga

  • Display name: Zygmunt Krynicki

  • GitHub handle: zyga

  • Commit emails: me@zygoon.pl, zygmunt.krynicki@canonical.com

  • DCO status: ⚠️ 1/2 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Canonical

  • Employer / location: Canonical / Poland

  • Website/blog: https://listed.zygoon.pl

  • Twitter: @zygoon

  • GitHub account: created 2011-05-12, 179 public repos

  • Active window in OpenShell: 2026-05-11 → 2026-05-20

  • PRs:

    PR Title State Merged
    #1494 ci: add snap build and publish pipeline open —
    #1465 test(snap): add spread integration tests open —
    #1462 fix(build): install binaries built in part build tree merged 2026-05-19
    #1238 (feat) early snap support merged 2026-05-11

  • Commit hashes: dfd47683, 0a8b35c3

2.15 Florencio Cano — fcanogab

  • Display name: Florencio Cano

  • GitHub handle: fcanogab

  • Commit email: 69301309+fcanogab@users.noreply.github.com

  • DCO status: ⚠️ 1/2 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Red Hat

  • Employer / location: Red Hat / Valencia (Spain)

  • GitHub account: created 2020-08-06, 21 public repos

  • Active window in OpenShell: 2026-05-06 → 2026-05-19

  • PRs:

    PR Title State Merged
    #1233 chore(ci): pin all GitHub Actions to SHA digests merged 2026-05-19
    #1232 chore(ci): pin all GitHub Actions to SHA digests closed —
    #1188 chore(ci): enable Dependabot for GitHub Actions with 48h cooldown merged 2026-05-06

  • Commit hashes: 9291eaf2, f9435b4d

2.16 Saurabh Agarwal — sauagarwa

  • Display name: Saurabh Agarwal

  • GitHub handle: sauagarwa

  • Commit email: sauagarw@redhat.com

  • DCO status: ✅ 2/2 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Red Hat

  • Employer / location: Red Hat / unknown

  • GitHub account: created 2021-07-20, 50 public repos

  • Active window in OpenShell: 2026-05-04 → 2026-05-08

  • PRs:

    PR Title State Merged
    #1579 feat(helm): add optional PostgreSQL backing store with Secret-based credentials open —
    #1282 fix(helm): derive sandboxNamespace from Release.Namespace instead of hardcoding merged 2026-05-08
    #1082 feat(server): add request-ID middleware for request correlation merged 2026-05-04

  • Commit hashes: 04e48d58, 40417981

2.17 will-lms — will-lms

  • Display name: will-lms

  • GitHub handle: will-lms

  • Commit email: will@lmstudio.ai

  • DCO status: ✅ 2/2 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: @lmstudio-ai

  • Employer / location: @lmstudio-ai / unknown

  • GitHub account: created 2025-06-09, 4 public repos

  • Active window in OpenShell: 2026-03-17 → 2026-03-17

  • PRs:

    PR Title State Merged
    #386 docs(inference): Add LM Studio guide merged 2026-03-17
    #382 fix(verification): send content type merged 2026-03-17

  • Commit hashes: 0463046a, 389454f0

2.18 Vegard Stikbakke — vegarsti

  • Display name: Vegard Stikbakke

  • GitHub handle: vegarsti

  • Commit email: vegard.stikbakke@gmail.com

  • DCO status: ⚠️ 0/1 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Earendil

  • Employer / location: Earendil / Norway

  • Website/blog: vegardstikbakke.com

  • Twitter: @vegardstikbakke

  • GitHub account: created 2013-10-16, 74 public repos

  • Active window in OpenShell: 2026-05-26 → 2026-05-26

  • PRs:

    PR Title State Merged
    #1572 docs: add Pi as supported sandbox merged 2026-05-26
    #1563 docs: add Pi as supported sandbox closed —

  • Commit hashes: 9e5aee4a

2.19 Ann Marie Fred — amfred

  • Display name: Ann Marie Fred

  • GitHub handle: amfred

  • Commit email: afred@redhat.com

  • DCO status: ✅ 1/1 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: Red Hat

  • Employer / location: Red Hat / Cary, North Carolina, USA

  • Twitter: @DukeAMO

  • GitHub account: created 2012-01-03, 46 public repos

  • Active window in OpenShell: 2026-05-26 → 2026-05-26

  • PRs:

    PR Title State Merged
    #1569 docs: add macOS compiler troubleshooting merged 2026-05-26

  • Commit hashes: 3460e5fd

2.20 Arnon Rotem-Gal-Oz — Arnonrgo

  • Display name: Arnon Rotem-Gal-Oz

  • GitHub handle: Arnonrgo

  • Commit email: arnonro@monday.com

  • DCO status: ⚠️ 0/1 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: (empty)

  • Employer / location: Unknown / unknown

  • Website/blog: http://arnon.me

  • Twitter: @arnonrgo

  • GitHub account: created 2010-12-21, 25 public repos

  • Active window in OpenShell: 2026-05-12 → 2026-05-12

  • PRs:

    PR Title State Merged
    #1390 fix(sandbox): use cgroup pids controller instead of RLIMIT_NPROC on K8s open —
    #1327 feat(k8s): support nodeSelector and tolerations from platform_config merged 2026-05-12
    #1326 fix(k8s): respect template OPENSHELL_SANDBOX_COMMAND instead of overwriting open —
    #1325 fix(sandbox): use cgroup pids controller instead of RLIMIT_NPROC on K8s closed —
    #1324 fix(sandbox): set HOME to match target user after privilege drop closed —

  • Commit hashes: 3b61c9cd

2.21 Matthias Oßwald — matz3

  • Display name: Matthias Oßwald

  • GitHub handle: matz3

  • Commit email: mat.osswald@sap.com

  • DCO status: ✅ 1/1 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: @SAP

  • Employer / location: @SAP / Germany

  • Twitter: @matthiaso

  • GitHub account: created 2012-02-05, 44 public repos

  • Active window in OpenShell: 2026-04-16 → 2026-04-16

  • PRs:

    PR Title State Merged
    #862 feat(sandbox): load system CA certificates for upstream TLS connections merged 2026-04-16

  • Commit hashes: 3b21df19

2.22 Vinicius Corrêa — vcorrea-ppc

  • Display name: Vinicius Corrêa

  • GitHub handle: vcorrea-ppc

  • Commit email: vinicius.correa@confi.com.vc

  • DCO status: ⚠️ 0/1 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: TheOne MGT

  • Employer / location: TheOne MGT / São Paulo

  • GitHub account: created 2025-07-01, 1 public repos

  • Active window in OpenShell: 2026-03-30 → 2026-03-30

  • PRs:

    PR Title State Merged
    #645 Missed input parameter to init OpenClaw container merged 2026-03-30

  • Commit hashes: 8c4b1722

2.23 Maxime Grenu — cluster2600

  • Display name: Maxime Grenu

  • GitHub handle: cluster2600

  • Commit email: 69890511+cluster2600@users.noreply.github.com

  • DCO status: ✅ 1/1 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: (empty)

  • Employer / location: Unknown / unknown

  • GitHub account: created 2020-08-19, 96 public repos

  • Active window in OpenShell: 2026-03-26 → 2026-03-26

  • PRs:

    PR Title State Merged
    #621 fix(sandbox): redact sensitive structured log values closed —
    #575 fix(router): use max_completion_tokens for OpenAI GPT-5+ validation merged 2026-03-25
    #574 fix(server): use ALPN-negotiated protocol for TLS connections closed —
    #573 fix(sandbox): track PTY state per SSH channel to fix terminal resize closed —

  • Commit hashes: 0e5ebb6f

2.24 Minh Dang Quang — minhdqdev

  • Display name: Minh Dang Quang

  • GitHub handle: minhdqdev

  • Commit email: minhdq.dev@gmail.com

  • DCO status: ✅ 1/1 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: HUST alumnus

  • Employer / location: HUST alumnus / Hanoi, Vietnam

  • Website/blog: https://minhdq.dev

  • GitHub account: created 2017-05-30, 47 public repos

  • Active window in OpenShell: 2026-03-25 → 2026-03-25

  • PRs:

    PR Title State Merged
    #604 fix(ci): heading-level mismatch in agent dianostic regex merged 2026-03-25

  • Commit hashes: 71d78c20

2.25 Khai Le — khaile

  • Display name: Khai Le

  • GitHub handle: khaile

  • Commit email: khaile.to@gmail.com

  • DCO status: ⚠️ 0/1 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: (empty)

  • Employer / location: Unknown / Ho Chi Minh city, Vietnam

  • GitHub account: created 2015-07-28, 8 public repos

  • Active window in OpenShell: 2026-03-22 → 2026-03-22

  • PRs:

    PR Title State Merged
    #518 docs(providers): add Groq to the supported providers table merged 2026-03-21
    #498 feat(provider): Add Groq as a supported inference provider closed —

  • Commit hashes: b4e20c19

2.26 Hector Flores — htekdev

  • Display name: Hector Flores

  • GitHub handle: htekdev

  • Commit email: 100806365+htekdev@users.noreply.github.com

  • DCO status: ⚠️ 0/1 signed

  • NVIDIA org check: HTTP 404 — not a member

  • Helios check: No NVIDIA match

  • GitHub company field: @microsoft

  • Employer / location: @microsoft / unknown

  • Website/blog: https://htek.dev

  • Twitter: @htekdev

  • GitHub account: created 2022-03-02, 94 public repos

  • Active window in OpenShell: 2026-03-20 → 2026-03-20

  • PRs:

    PR Title State Merged
    #631 feat(sandbox): L7 credential injection — query param rewriting and Basic auth encoding closed —
    #541 feat(sandbox): L7 credential injection for non-inference providers closed —
    #476 feat(providers): add GitHub Copilot CLI agent provider merged 2026-03-20

  • Commit hashes: eff88b70

3. NVIDIA Employees Using Personal Emails

Contributors who are confirmed NVIDIA employees (via Helios match, NVIDIA-org membership, or @nvidia.com commit email on some commits) but who authored one or more commits with a non-@nvidia.com email.

Name Personal Email(s) NVIDIA Email Helios-verified Personal-email commit count
John Myers (johntmyers) 9696606+johntmyers@users.noreply.github.com jomyers@nvidia.com Y (SW-GPU) 123
Jonas Toelke (jtoelke2) 149006449+jtoelke2@users.noreply.github.com jtoelke@nvidia.com Y (SW-TEGRA) 23
Kirit Thadaka (kirit93) kirit.thadaka@gmail.com kthadaka@nvidia.com Y (Enterprise Products) 11
Al Watson (zredlined) zredlined@users.noreply.github.com awatson@nvidia.com Y (Engrg-Hardware 1) 9
Dylan Durst (ddurst-nvidia) 267424412+ddurst-nvidia@users.noreply.github.com ddurst@nvidia.com Y (SW-CLOUD) 2
Andrew Newberry (drew) 385+drew@users.noreply.github.com anewberry@nvidia.com Y (SW-GPU) 1
Tinson Lai (laitingsheng) laitingsheng@hotmail.com tinsonl@nvidia.com Y (SW-GPU) 1
Kris Hicks (krishicks) kris@krishicks.com khicks@nvidia.com Y (SW-GPU) 1
Alec Fong (theFong) alecsanf@usc.edu alecf@nvidia.com Y (Enterprise Products) 1
Aaron Erickson (ericksoa) aaron.c.erickson@gmail.com aerickson@nvidia.com Y (SW-CLOUD) 1
Max Dubrinsky (maxdubrinsky) maxdubrinsky@users.noreply.github.com mdubrinsky@nvidia.com Y (Enterprise Products) 1
Trevor McKay (tmckayus) tmgithub1@gmail.com tmckay@nvidia.com Y (SW-GPU) 1
Peter Entschev (pentschev) peter@entschev.com pentschev@nvidia.com Y (SW-GPU) 1
Glen Maddern (geelen) glen@glenmaddern.com gmaddern@nvidia.com Y (Engrg-Hardware 1) 1

Notes:

  • "Personal-email commit count" is the number of commits this person authored using a non-@nvidia.com email. Commits made with the official @nvidia.com email are not counted in this column.
  • Two categories of non-NVIDIA email appear in this table and they have different hygiene implications:
    • @users.noreply.github.com (GitHub's privacy-protecting address): account-attributable to a verified NVIDIA GitHub user and is GitHub's recommended default. Mostly benign.
    • Genuine personal addresses (gmail, personal domains, .edu, hotmail): come from a workstation configured with a personal user.email git setting and indicate inconsistent dev-environment configuration.
  • theFong/alecf commits as alecsanf@usc.edu (an alumni or pre-NVIDIA student address) but Helios confirms him in Enterprise Products. kirit93/kthadaka commits exclusively from kirit.thadaka@gmail.com — both Helios-confirmed active NVIDIA employees with consistently-misconfigured local git identities.

4. Top 10 NVIDIA Committers

Confirmed NVIDIA-affiliated authors, ordered by commit count on HEAD. Email aliases are merged where the same person commits from both their @nvidia.com address and a personal / @users.noreply.github.com address.

# Name Commits Signed Unsigned % signed Emails used
1 Andrew Newberry 244 15 229 6% ⚠️ 385+drew@users.noreply.github.com, anewberry@nvidia.com
2 John Myers 146 32 114 22% ⚠️ 9696606+johntmyers@users.noreply.github.com, jomyers@nvidia.com
3 Piotr Mlocek 91 5 86 5% ⚠️ pmlocek@nvidia.com
4 Taylor Mutch 31 8 23 26% ⚠️ tmutch@nvidia.com
5 Miyoung Choi 24 2 22 8% ⚠️ miyoungc@nvidia.com
6 Jonas Toelke 23 18 5 78% 149006449+jtoelke2@users.noreply.github.com
7 Evan Lezar 14 10 4 71% elezar@nvidia.com
8 Kirit Thadaka 11 0 11 0% ⚠️ kirit.thadaka@gmail.com
9 Al Watson 9 4 5 44% ⚠️ zredlined@users.noreply.github.com
10 Tinson Lai 4 3 1 75% laitingsheng@hotmail.com, tinsonl@nvidia.com

Top-10 totals: 597 commits (79% of all 754 repo commits) · 97 signed · 500 unsigned — i.e., 99% of the NVIDIA unsigned total sits inside this top-10 list. Worst-DCO offenders by absolute unsigned count: Andrew Newberry (229 unsigned), John Myers (114 unsigned), Piotr Mlocek (86 unsigned), Taylor Mutch (23 unsigned), Miyoung Choi (22 unsigned).

5. Bots

Bot account Commit email Commits
dependabot[bot] 49699333+dependabot[bot]@users.noreply.github.com 9

No other automated accounts (renovate, github-actions, etc.) authored commits. Bot commits are excluded from external-human counts and from the contributor profiles above.

6. Summary Table — External Contributors

# Name GitHub handle Email Employer Commits PRs DCO NVIDIA org member
1 Mesut Oezdil mesutoezdil 114185853+mesutoezdil@users.noreply.github.com Adfinis GmbH 21 37 ⚠️ No (404)
2 Seth Jennings sjenning sjenning@redhat.com Red Hat 18 18 ⚠️ No (404)
3 Russell Bryant russellb russell.bryant@gmail.com Red Hat, Inc., @vllm-project 13 13 ⚠️ No (404)
4 Florent BENOIT benoitf fbenoit@redhat.com Red Hat, Inc. 11 11 ⚠️ No (404)
5 Derek Carr derekwaynecarr decarr@redhat.com Red Hat 11 13 ⚠️ No (404)
6 Eric Curtin ericcurtin eric.curtin@docker.com Docker, Inc 8 15 ⚠️ No (404)
7 Adam Miller maxamillion admiller@redhat.com Red Hat 8 10 ⚠️ No (404)
8 mjamiv mjamiv 142179942+mjamiv@users.noreply.github.com Unknown 7 13 ⚠️ No (404)
9 Mrunal Patel mrunalp mrunalp9@outlook.com Red Hat, Inc 4 4 ⚠️ No (404)
10 LateNightHackathon latenighthackathon 256481314+latenighthackathon@users.noreply.github.com LateNightHackathon 3 10 ✅ No (404)
11 Parth Sareen ParthSareen parth.sareen@ollama.com @ollama 3 4 ⚠️ No (404)
12 Adel Zaalouk zanetworker adel.zalok.89@gmail.com Red Hat 2 3 ⚠️ No (404)
13 Colin Walters cgwalters walters@verbum.org Red Hat, Inc. 2 4 ✅ No (404)
14 Zygmunt Krynicki zyga me@zygoon.pl Canonical 2 4 ⚠️ No (404)
15 Florencio Cano fcanogab 69301309+fcanogab@users.noreply.github.com Red Hat 2 3 ⚠️ No (404)
16 Saurabh Agarwal sauagarwa sauagarw@redhat.com Red Hat 2 3 ✅ No (404)
17 will-lms will-lms will@lmstudio.ai @lmstudio-ai 2 2 ✅ No (404)
18 Vegard Stikbakke vegarsti vegard.stikbakke@gmail.com Earendil 1 2 ⚠️ No (404)
19 Ann Marie Fred amfred afred@redhat.com Red Hat 1 1 ✅ No (404)
20 Arnon Rotem-Gal-Oz Arnonrgo arnonro@monday.com monday.com (per email) 1 5 ⚠️ No (404)
21 Matthias Oßwald matz3 mat.osswald@sap.com @SAP 1 1 ✅ No (404)
22 Vinicius Corrêa vcorrea-ppc vinicius.correa@confi.com.vc TheOne MGT 1 1 ⚠️ No (404)
23 Maxime Grenu cluster2600 69890511+cluster2600@users.noreply.github.com Unknown 1 4 ✅ No (404)
24 Minh Dang Quang minhdqdev minhdq.dev@gmail.com HUST alumnus 1 1 ✅ No (404)
25 Khai Le khaile khaile.to@gmail.com Unknown 1 2 ⚠️ No (404)
26 Hector Flores htekdev 100806365+htekdev@users.noreply.github.com @microsoft 1 3 ⚠️ No (404)

Totals: 26 external contributors, 128 commits, 187 PRs (across all states). DCO compliance: 56/128 signed (44%).

7. Notable Observations

  • Major Red Hat / OpenShift partner cluster: 11 external contributors identify as Red Hat (Seth Jennings, Russell Bryant, Florent BENOIT, Derek Carr, Adam Miller, Mrunal Patel, Adel Zaalouk, Colin Walters, Florencio Cano, Saurabh Agarwal, Ann Marie Fred), totalling 74 commits. The work is concentrated in OpenShift compatibility (TLS, RBAC, helm chart, OIDC, bypass-detection, Podman driver, nftables). Two Red Hat employees — Seth Jennings (18 commits, 0% signed) and Adam Miller (8 commits) — are among the heaviest non-NVIDIA committers and the pattern is consistent with an active engineering collaboration on OpenShift integration.
  • vLLM core maintainer presence: Russell Bryant (Red Hat Distinguished Engineer, vLLM project maintainer) authored 13 commits — including nontrivial security work (fix(sandbox): remove DNS resolution from mechanistic mapper to prevent data exfiltration #1329) and a refactor from iptables to nftables (#1401). His commit email is russell.bryant@gmail.com, not a Red Hat address — typical of a senior open-source developer using a long-standing personal git identity.
  • Docker, Inc. engineer: Eric Curtin from Docker contributed 8 commits (only 1 signed) covering Podman fallback, AI-runner integration, and an openshell run command. Docker is a relevant infrastructure dependency for OpenShell's compute drivers.
  • Ollama engineer: Parth Sareen (3 commits, 0% signed) contributed Ollama-related provider work. Ollama is a key inference provider OpenShell routes to.
  • LM Studio engineer: will-lms (2 commits) — an inference-provider partner. Both commits are signed.
  • Canonical engineer: Zygmunt Krynicki (2 commits) — works on snapd/Ubuntu at Canonical, contributed via two different identities (@canonical.com and me@zygoon.pl).
  • SAP engineer: Matthias Oßwald (@SAP) contributed 1 signed commit.
  • Microsoft / Azure: Hector Flores (htekdev, GH company: @microsoft) contributed 1 commit. Microsoft Azure is a meaningful cloud peer/competitor to NVIDIA DGX Cloud; the single contribution is benign but worth flagging in this category.
  • Heavy doc/CI contributor from Adfinis GmbH: Mesut Oezdil (21 commits across 37 PRs in 27 days) is the single largest external contributor. Work is dominated by docs/CI hardening and small fixes; he opens many PRs that get closed/superseded (only ~14 of 37 PRs merged), suggesting a high-volume, low-targeting contribution pattern. Only 7/21 commits are signed, the largest single external DCO gap.
  • mjamiv warrants attention: 7 commits / 13 PRs of meaningful work (CLI JSON output, L7 wildcard hosts, sandbox tests). GitHub profile is completely empty (no name, bio, company, location). The account was created 2023-08-13 and has 33 public repos. Helios returns no match. PRs originate from a personal fork mjamiv/OpenShell. One commit is co-authored with NVIDIA engineer John Myers (9696606+johntmyers@users.noreply.github.com), suggesting either an NVIDIA contractor not yet added to the GH org, or an external contributor who works closely with the OpenShell team. Worth confirming whether they are a contractor, partner engineer, or otherwise.
  • Identity-gap accounts (no usable profile data): 3 external contributor(s) have empty name/company/bio or near-empty profiles: Arnonrgo, cluster2600, khaile. For most, partial corroboration (LinkedIn, fork org, account age) suggests student/hobbyist/early-career contributors.
  • Hackathon-style identity: latenighthackathon (3 commits, 100% signed, DFW, TX) — the handle, naming pattern, and contribution style (10 PRs in close succession) are consistent with a hackathon participant or student.
  • Vietnam-based contributors: 2 contributor(s) from Vietnam (minhdqdev, khaile) — 1 commit each, no apparent corporate affiliation.
  • DCO hygiene comparison:
    • External contributors: 44% signed (56/128) ⚠️
    • NVIDIA contributors: 18% signed (111/617) ⚠️
    • Bots: 100% signed (9/9) ✅
    • Unlike sibling NVIDIA OSS projects (e.g., nvidia/nvsentinel) where external contributors are at 100% DCO compliance and NVIDIA internal is the main gap, OpenShell has imperfect DCO on both sides. The repo does not gate PRs on DCO, and a meaningful fraction of external commits arrive unsigned. A simple Signed-off-by PR-check workflow plus git config --global format.signOff true documented in CONTRIBUTING.md would close most of the gap.
  • Internal DCO concentration: 5 NVIDIA accounts each have 20+ unsigned commits. The largest is Andrew Newberry (229 unsigned out of 244 — 94% unsigned). A one-time git config --global format.signOff true per developer would close the bulk of the gap.
  • Multi-identity NVIDIA contributors: Andrew Newberry, John Myers, Tinson Lai each commit from more than one email address — typically @nvidia.com at work and @users.noreply.github.com or a personal address at home. None of these are problematic, but it makes any per-author aggregation that does not de-duplicate emails undercount these individuals.
  • Notable historical GH handle: Drew Newberry holds the four-letter GH handle drew (user ID 385, an early-GitHub-era account) and authors 244 commits — by far the largest single-author contribution in OpenShell. Helios confirms him as active NVIDIA SW-GPU.
  • DCO highlights: Derek Carr (Red Hat, 10/11 signed) and latenighthackathon (3/3 signed) lead by good example. The Red Hat group skews positive on DCO — cgwalters, sauagarwa, amfred are all 100% signed. Russell Bryant is 7/13 — split roughly 50/50 — suggesting an inconsistent local git configuration rather than a deliberate stance.

8. Methodology Appendix

8.1 Shell command patterns

# Pull author metadata
git log --format='%H|%an|%ae|%ai|%s' > /tmp/openshell-commits.txt

# Pull commit bodies (used for DCO scan)
git log --format='COMMIT:%H%n%B%n---END---' > /tmp/openshell-bodies.txt

# Aggregate by email
awk -F'|' '{print $3}' /tmp/openshell-commits.txt | sort | uniq -c | sort -rn

# DCO check: regex `(?im)^\s*Signed-off-by:\s*\S+` against each commit body

# Resolve plain personal emails to GitHub login via the commit API
gh api repos/NVIDIA/OpenShell/commits/<sha> --jq '.author.login'

# NVIDIA org membership check
gh api -i /orgs/NVIDIA/members/<handle> | head -1
# 204 = member, 404 = non-member

# Profile metadata
gh api /users/<handle> --jq '{name, company, location, bio, blog, twitter_username, public_repos, created_at}'

# Per-user PR list
gh pr list --repo NVIDIA/OpenShell --author <handle> \
    --state all --json number,title,state,mergedAt,createdAt --limit 50

8.2 Helios commands

helios-cli user get <login> --json | jq '.data.attributes | {login, cn, email, active, department}'
helios-cli user search --filter-email <email> --json

For each NVIDIA candidate, multiple likely login-pattern guesses were tried — <first><last_initial>, <last><first_initial>, <first>.<last>, <first_initial><last>, etc. — and a successful guess was confirmed by matching the returned cn: against the GitHub display name.

8.3 Email-alias map (multi-email NVIDIA contributors)

Person Emails seen NVIDIA email
Andrew Newberry 385+drew@users.noreply.github.com, anewberry@nvidia.com anewberry@nvidia.com
John Myers 9696606+johntmyers@users.noreply.github.com, jomyers@nvidia.com jomyers@nvidia.com
Tinson Lai laitingsheng@hotmail.com, tinsonl@nvidia.com tinsonl@nvidia.com

8.4 Classification tier (applied in order, first match wins)

  1. Helios match → NVIDIA
  2. Commit email @nvidia.com → NVIDIA
  3. gh api /orgs/NVIDIA/members/<handle> returns 204 → NVIDIA
  4. Otherwise → external

8.5 Caveats

  • mjamiv is a GitHub User account with no profile metadata. NVIDIA org check returns HTTP 404 and no Helios match was found through name/login pattern guessing. Classified as external via Tier 4. One commit co-authors with John Myers (NVIDIA), so an NVIDIA contractor relationship is plausible.
  • russellb (Russell Bryant) is sometimes asked about in NVIDIA contexts because of his vLLM project leadership. His GitHub company field still reads Red Hat, Inc., @vllm-project, his bio reads Distinguished Engineer @ Red Hat, NVIDIA org check returns HTTP 404, and Helios shows a different rbryant (Rob Bryant, Marketing). Classified as external.
  • @users.noreply.github.com → handle parser supports both the newer <id>+<handle>@ format and the older <handle>@ format.
  • All PR counts are point-in-time as of 2026-05-26. PRs in OPEN/CLOSED/MERGED state are all counted.
  • The Helios --fields flag is currently broken (returns warning Invalid fields); workaround is to fetch full attributes and filter with jq.

Quick stats

  • Total commits: 754
  • External contributors: 26 (128 commits)
  • NVIDIA employees: 25 (617 commits)
  • NVIDIA personal-email cases: 14
  • Bots: 1 (9 commits)
  • DCO unsigned external commits: 72 of 128
  • DCO unsigned NVIDIA commits: 506 of 617
  • Competitors / cloud peers flagged: 1 (Microsoft via htekdev); no GPU/AI hardware-vendor employees (MooreThreads, AMD, Intel, Huawei, Tenstorrent, Cerebras) seen.
  • Identity-gap accounts: 4
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment