mrkeyoor.com_
Tue 01 Sept 17:44 UTC
Self-Hostedevaluationupdated 26 Aug 2026

life-ipo review

Life IPO is a Chinese-language personal data system for finances, health, knowledge, contacts, AI-assisted decisions, and team work. Its README and interface documentation are in Chinese; we found no English guide, so English-only operators will need translation before they can assess or deploy it.

+325 / 4dstars / 7d
Verdict

Our Life IPO install pulled 748 packages and 735 MB, then both build and tests stopped on the same Rolldown/Vite build error, while npm audit found 16 high-severity advisories. Treat it as readable alpha source for Chinese-speaking experimenters, not as a safe home for real financial, medical, or relationship records. The missing license alone blocks ordinary open-source adoption until the owner grants reuse rights.

We ran it

Lab card: what happened when we ran life-ipoScreenshot of life-ipo (github.com/gtlhuyidan-sketch/life-ipo)
Install✓ · 49s748 packages · 735 MB
Build✗ · 8s
Tests✗ · 9sran, no count parsed
Known vulns180 critical · 16 high · 0 moderate · 2 low (npm audit)
Repo608 files~82,304 lines of source · 27 MB · 0 CI workflows · tests dir

Answers from our run

Does life-ipo build from source?

Dependencies installed in 49 seconds (748 packages), and the build failed. We cloned commit 6517ad4 into a clean Debian container with 3 CPUs and no project-specific setup.

Do life-ipo's tests pass?

The test command failed in our container, and its output did not report a pass or fail count.

Does life-ipo have known vulnerabilities in its dependencies?

npm audit flagged 18 known advisories in the dependency tree at the time of our run.

Who should not use life-ipo?

Anyone who needs normal open-source reuse rights: the README says no license has been specified and public visibility does not grant permission to copy, modify, or redistribute.

What are the alternatives to life-ipo?

Actual Budget, Firefly III, Monica. Our Life IPO install pulled 748 packages and 735 MB, then both build and tests stopped on the same Rolldown/Vite build error, while npm audit found 16 high-severity advisories.

Setup1/5735 MB install; build and tests fail before six services start
Docs3/5Detailed Chinese README, but no English or cross-platform guide
Community2/5216 stars and 3 issues in a repository created yesterday
Maturity1/5Alpha, unlicensed, unreleased, and missing core deployment controls

Who it’s for

Chinese-reading developers who want to inspect an early attempt at joining personal finance, health, contacts, and planning data.
Solo experimenters comfortable running 6 local services across Node.js and Python.
Contributors willing to work on an alpha project without a release or open-source license yet.
Users prepared to validate every health, finance, and AI output with an appropriate professional.

Who it’s NOT for

Anyone who needs normal open-source reuse rights: the README says no license has been specified and public visibility does not grant permission to copy, modify, or redistribute.
Linux or macOS users seeking a supported one-command setup: the current launcher requires Windows 10 or 11, while cross-platform startup and containers remain unchecked roadmap items.
People who want automatic personal-data capture today: issue #1 says reliance on manual entry is a retention problem and proposes image, browser, and app ingestion later.
Organizations handling sensitive records under a mature security process: the README calls the project alpha and says public deployment still needs HTTPS, rate limits, encrypted backups, audit logs, and least-privilege controls.
Users uncomfortable with speculative profiling: issue #2 proposes astrology and social-profile inputs for relationship advice.

Setup reality

Our sandbox install succeeded in 49 seconds, pulling 748 npm packages and using 735 MB. The build failed with exit 1 after 8 seconds inside the Rolldown/Vite configuration-loading path. Tests failed after 9 seconds because the test command runs that build first; the summary reported one build error.

The full application is 6 services, not one Node process. The README requires Windows 10 or 11 for its launcher, Node.js 24 for the whole stack, Python 3.11 or newer, Cloudflare D1 configuration, several database paths and application secrets, plus a DeepSeek key for model calls.

The 27 MB checkout had 608 files and about 82,304 source lines, with no CI workflows or Dockerfile. Npm audit reported 18 known vulnerabilities: 16 high and 2 low. Cross-platform launching, container deployment, database migrations, and encrypted backups are roadmap checkboxes rather than current setup paths.

The interface joins six sensitive domains in one account

Life IPO combines finance, health, qualifications, contacts, AI decision support, and team execution. The main site uses one user identity and exposes data to specialist workspaces rather than keeping six unrelated accounts. Its README is written in Chinese and labels the product alpha. We found no English guide. That language boundary matters because the configuration and safety notes cover personal records that should not be deployed through machine translation alone.

The scope is unusually broad for a repository created on August 25, 2026. Screenshots cover 14 pages, including budgets, portfolios, medical timelines, knowledge records, contact histories, AI planning, and a team board. The intended flow is clear: collect facts, ask a model for a decision, then turn the result into tasks and review it later. The breadth also multiplies the consequences of a permissions bug or incorrect recommendation.

Six local services make the quick start Windows-specific

The documented launcher requires Windows 10 or 11. It coordinates a Vinext main site on port 3010, contact and knowledge applications on ports 3002 and 3020, a health graph on 8767, an AI planner on 7341, and a team workspace on 7351. Node.js 24 and Python 3.11 or newer are required for the full setup, while the main site alone accepts Node.js 22.13.0 or newer.

Each service brings configuration. The main site needs JWT and AI credential encryption secrets. Health data has separate session and encryption keys, while knowledge and team services require their own application secrets and databases. Cloudflare deployment needs a Sites project and D1 binding. DeepSeek calls need an API key. The README advises HTTPS, rate limiting, encrypted backups, audit logs, and least privilege for public hosting, but those controls are deployment work for the operator.

What happened when we ran it

Our sandbox installed 748 npm packages in 49 seconds and consumed 735 MB. The build then exited with code 1 after 8 seconds. The log tail shows an error traveling through Rolldown's binding wrapper while Vite was bundling and loading its configuration for Vinext. It does not expose the originating message in the supplied tail, so we cannot responsibly name a dependency, platform, or configuration as the cause.

Tests exited with code 1 after 9 seconds. The root test script runs npm run build before its Node test file, and the summary says the build failed with one error. No test cases reached a reported pass or fail result in the measurement. Npm audit found 18 known vulnerabilities among the installed packages: 16 high severity and 2 low, with none classified as critical or moderate.

The checkout held 608 files, about 82,304 source lines, and 27 MB before installation. It has a tests directory, but no GitHub CI workflow and no Dockerfile. That leaves the only measured build red and offers no visible repository automation that would rerun it on a clean host. Cross-platform launch, container deployment, versioned database migrations, and optional encrypted backups all remain unchecked roadmap entries.

The alpha label matches the missing ingestion and migration work

Manual entry currently carries much of the data model. Issue #1 says users may abandon the product within three months if financial, health, knowledge, and contact information must all be entered by hand. It suggests image recognition, a browser extension, and app connections as future directions. The README does not present those inputs as shipped features, so buyers should judge the current forms and imports rather than the proposed collection layer.

Database evolution is another open boundary. A unified migration system and versioned schema appear as unfinished roadmap items. With 6 services and several SQLite or D1 stores, schema upgrades and rollbacks are operational necessities, especially once a user has accumulated health records or financial history. An experimenter can discard sample data after a bad migration. A real user needs tested restoration and documented compatibility.

The relationship proposal creates an ethical reason to walk away

Open issue #2 proposes adding astrology, social posts, avatars, and messages to generate personality profiles and relationship advice. The author acknowledges stereotyping while calling it useful. That is not a minor interface preference. It changes what data may be collected about other people and how unverifiable signals could influence decisions about them. Teams with consent, fairness, or employment constraints have a concrete reason to reject this direction.

The README is more careful about the current AI planner. It says model conclusions can be wrong and that medical, investment, insurance, tax, and legal decisions need review by qualified professionals. DeepSeek credentials are described as AES-GCM encrypted and tied to the user identity, while JSON exports omit several secrets and binary images. Those design statements are sensible, but our 9-second test attempt never reached a passing suite that could support them.

No license means this is not adoptable open source yet

The repository had 216 stars, 3 combined issues and pull requests, and a same-day push on August 26, 2026. There was no latest GitHub release. That activity is too young to establish maintenance habits, upgrade discipline, or response times. The repository's own status label, alpha, is the useful maturity signal.

More decisively, GitHub reports no license and the README says the repository has not selected one. Public source can be read, but that does not automatically grant rights to copy, change, or redistribute it. Actual Budget is a safer focused choice for local-first finances, Firefly III for self-hosted financial records, and Monica for contact history. Life IPO becomes a serious adoption candidate only after licensing, clean builds, dependency remediation, migrations, and a supported deployment path exist.

Alternatives

ProjectWhat it isPick it when
Actual Budget gh↗A local-first personal budgeting application with bank sync options and a focused financial model.pick this instead when budgeting and account tracking are the real need, and you want a narrower established application.
Firefly III gh↗A self-hosted personal finance manager for accounts, transactions, budgets, and reports.pick this instead when financial records need a documented server product rather than a six-domain personal system.
MonicaA personal relationship manager for contacts, reminders, notes, and interaction history.pick this instead when maintaining relationships is the goal and speculative AI profiling is unwanted.

What people are saying

  1. [velocity-scout] gtlhuyidan-sketch/life-ipo

Sources

  1. Life IPO README
  2. Life IPO repository facts
  3. Data ingestion issue #1
  4. Relationship profiling issue #2
  5. AI risk issue #3

More self-hosted reviews

v2 · OpenShell · wigolo · Mindwtr · club-3090 · reclip · the whole board →