Z/Officially open-sourced

Technology and Creation AI
1

Official Announcement:

Regarding the ZCode product security issues reported by the community, we have completed the rectification and apologize to all users.

We have open-sourced ZCode ( GitHub - zai-org/ZCode: Z.ai's coding agent harness. Powerful, intelligent, extensible. · GitHub ), putting the code under community supervision and making ZCode open and transparent.

Many thanks to the community developers who previously discovered issues with ZCode. Going forward, we will establish a regular product security vulnerability reporting mechanism. Developers are welcome to continue reviewing and reporting issues, and we will provide corresponding rewards based on their severity.

Regarding the code data mentioned by the community, we promise that it was not retained and has never been used for model training.

After completing the rectification, we invited the China Academy of Information and Communications Technology and NSFOCUS Technologies to conduct security audits. The results are as follows: According to the technical evaluation by the China Academy of Information and Communications Technology, the zcode-prod Alibaba Cloud OSS bucket was confirmed to contain zero data in the cloud. The ZCode v3.14.0 client has completed its security rectification; the Repo Wiki feature has been removed, and the local repository snapshot generation and upload pipeline has been severed. According to the review by NSFOCUS Technologies, all data objects in zcode-prod (Alibaba Cloud Object Storage Service, OSS) and the bucket itself have been confirmed deleted. The ZCode v3.14.0 client has completed its rectification; the Repo Wiki entry and corresponding generation pipeline have been removed, and no functional path capable of triggering local repository snapshots or sending files externally was found.

We apologize again and ask everyone to continue supervising us.

Putting aside the whole stealing issue, zocde’s interactions and design still seem pretty good, right? What do you all think? Any thoughts about developing a fork? (Though I can’t quite let it go :ac01: )

2 Likes
2

Even calling him an animal would be letting him off easy. He doesn’t have even the most basic sense of trust.

1 Like
3

Who knows whether the open-source version and the version users are running are even the same, haha.

Companies like this have absolutely no credibility.

4 Likes
4

The AB version provided to users is inconsistent with the open-source version.

5

Lock Issue and PR :ac01:

6

No need—it’s terrible.

1 Like
7

You brought it on yourself.

8

Who knows whether this is the version deployed in production?

9

The usability is indeed among the better ones available right now, but isn’t it obvious that the open-source and official versions are separate?

10

The evidence is conclusive: the open-source version is different from the version users are running.

image
image900×784 108 KB

4 Likes
11

image
image1269×267 41.6 KB

1 Like
12

Looks open source, but in reality they don’t allow derivative modifications. They’re absolute scumbags—disgusting. A company like this should go bankrupt.

13

Just quit a company like this already.
:xhj007:

14

Trash

15

The open-source version seems stripped down, with many features missing. If you’re in the wrong, you should own up to it—how can you not even understand such a basic principle?

16

Is the open-source version the same as the one they developed themselves for us to use?

17

This isn’t really called open source; it’s called publicly available source code, or source-available.

18

Then use the CI build.

19

This isn’t what was advertised, guys. And the version everyone wants to see isn’t the censored one either.

20

It’s just open source for PR purposes—they even closed the issue section. :xhj32: