mrkeyoor.com_
Fri 16 Oct 19:46 UTC
AI Toolsevaluationupdated 06 Oct 2026

Open-Generative-AI review

Open Generative AI is an MIT-licensed desktop and web interface for making images, video, audio, lip sync, and other media. Most of its large model catalog runs through the Muapi service, while the desktop app also supports a smaller set of local image models and a separately operated Wan2GP server.

+453stars / 7d
Verdict

Our Open Generative AI run installed 1,239 packages and found 36 vulnerabilities, then failed its production build on three missing CSS imports, so commit 9f2ed4f is a poor base for a release-bound deployment. Try the packaged desktop app if Muapi's catalog and the optional local image path match your work. Teams that need an offline media stack, a passing source build, or enforced safety controls should choose another project.

We ran it

Lab card: what happened when we ran Open-Generative-AIScreenshot of Open-Generative-AI (muapi.ai/open-generative-ai?utm_source=github&utm_medium=about&utm_campaign=open-generative-ai)
Install✓ · 78s1239 packages · 1375 MB
Build✗ · 28s
Testsn/ano test script
Known vulns362 critical · 26 high · 5 moderate · 3 low (npm audit)
Repo398 files~98,320 lines of source · 32.9 MB · 0 CI workflows · Dockerfile · tests dir

Answers from our run

Does Open-Generative-AI build from source?

Dependencies installed in 78 seconds (1239 packages), and the build failed. We cloned commit 9f2ed4f into a clean Debian container with 3 CPUs and no project-specific setup.

Does Open-Generative-AI have tests you can run?

Not through a standard command: the project exposes no test script or target that our harness could run.

Does Open-Generative-AI have known vulnerabilities in its dependencies?

npm audit flagged 36 known advisories in the dependency tree, including 2 critical at the time of our run.

Who should not use Open-Generative-AI?

Teams that require a clean source-build gate: our build failed on three missing ai-agent/dist/tailwind.css imports, and the repository has no test script.

What are the alternatives to Open-Generative-AI?

ComfyUI, InvokeAI, Stable Diffusion WebUI. Our Open Generative AI run installed 1,239 packages and found 36 vulnerabilities, then failed its production build on three missing CSS imports, so commit 9f2ed4f is a poor base for a release-bound deployment.

Setup1/51,239 packages installed, but the 28-second build failed
Docs3/5Detailed setup, but model counts and download versions conflict
Community4/529,690 stars, an October 3 push, and active issues and PRs
Maturity2/5v2.0.0 has installers, but our build and audit were not clean

Who it’s for

Creators who want one interface for Muapi's image, video, audio, and lip-sync endpoints.
JavaScript teams willing to customize a Next.js and Electron monorepo around their own media workflow.
Desktop users who want local Stable Diffusion image generation through sd.cpp.
GPU owners prepared to run Wan2GP separately for local video and larger image models.

Who it’s NOT for

Teams that require a clean source-build gate: our build failed on three missing ai-agent/dist/tailwind.css imports, and the repository has no test script.
Buyers who read self-hosted as fully offline: most studios submit jobs and upload input files to Muapi, while local inference is limited to the desktop app.
Organizations that must enforce provider safety controls: the README explicitly advertises no content filters, prompt rejections, or guardrails.
Windows users expecting local generation to work without investigation: open issue 356 reports that the bundled sd.cpp executable in v2.0.0 exits because debug CRT DLLs are absent.
Security-sensitive deployments seeking a clean dependency audit: our install reported 36 known vulnerabilities, including 2 critical and 26 high.

Setup reality

Our sandbox installed commit 9f2ed4f in 78 seconds, adding 1,239 packages and using 1,375 MB. The build failed after 28 seconds because three agent pages could not resolve ai-agent/dist/tailwind.css. There was no test script, so tests were skipped. Npm audit reported 36 known vulnerabilities: 2 critical, 26 high, 5 moderate, and 3 low.

Source setup needs Node.js 18 or newer, Git submodules, and npm run setup to build the workspaces. Cloud generation needs a Muapi access credential. You can skip that credential for desktop local models, but Wan2GP requires a separate Python and PyTorch server on a CUDA or ROCm machine.

Local inference works only in the desktop app. The macOS build is not notarized, the Windows installer is not code-signed, and Ubuntu AppImage users may meet an AppArmor user-namespace restriction. The README recommends the Debian package on Ubuntu 24.04 or later instead of weakening that restriction system-wide.

The open source app still routes most generation through Muapi

Open Generative AI puts a large media catalog behind one Next.js and Electron interface. The README counts more than 420 models across image, video, lip sync, audio, and related categories. You can move among task-specific studios instead of wiring each provider yourself. That is the useful part: model selection, uploads, controls, polling, history, and downloads share a UI.

The word self-hosted needs a qualifier. The documented cloud path sends a request to Muapi, polls its prediction endpoint, and uploads input files to Muapi before conditioned generation. The browser stores the access credential in localStorage. Running the front end on your server does not move those models onto your hardware. The separate local paths cover selected models and exist only in the desktop app.

What happened when we ran it

Our sandbox installed commit 9f2ed4f in 78 seconds. Npm added 1,239 packages, and the installed tree occupied 1,375 MB. The checkout itself contained 398 files, about 98,320 lines of source, and used 32.9 MB. Installation succeeded, so the failure came at the next gate.

The production build stopped after 28 seconds. Webpack could not resolve ai-agent/dist/tailwind.css from AgentChatClient.js, AgentCreateClient.js, and AgentEditClient.js. The log does not establish whether the missing file came from a workspace build, package export, or import mistake, so assigning a cause would be guesswork. It does establish that the measured commit did not produce a deployable Next.js build in the fresh container.

There was no test script or target, so our run skipped tests. Npm audit reported 36 known vulnerabilities: 2 critical, 26 high, 5 moderate, and 3 low. The repository did include a Dockerfile, a compose file, a tests directory, and npm workspaces, but no CI workflow files. Those files are useful scaffolding. They do not replace a passing command that a maintainer or adopter can run.

Local mode is desktop-only and split between two engines

The bundled sd.cpp engine runs selected image models on the same computer as the Electron app. The documented choices range from 2.1 GB Stable Diffusion 1.5 files to SDXL Base at 6.9 GB. Z-Image needs its model plus a 2.4 GB text encoder and a 335 MB VAE. That route can use Metal on Apple Silicon, with CUDA, Vulkan, or ROCm options on other supported systems.

Wan2GP is a different arrangement. You operate a Python and PyTorch server on an NVIDIA or AMD GPU machine, then point the desktop client at its Gradio URL. It covers larger image and video families, though the README says full Video Studio wiring remains on the roadmap. A Mac can stay as the client, but the compute box, model downloads, network exposure, and access policy are yours to manage.

Windows deserves a trial before you commit to the local route. Issue 356 reports that v2.0.0 local generation exits with code 3221225781 because the bundled executable looks for debug CRT DLLs that ordinary Windows systems lack. The reporter reproduced it with two Z-Image models. That is one user report, not our sandbox result, but it concerns the exact packaged path offered to non-developers.

The source baseline fails both build and audit gates

A 1,239-package install is not automatically bad, yet it raises the cost of every unresolved advisory and workspace mismatch. Our audit found 36 vulnerabilities, and our build failed before we could check production behavior. An open pull request, number 352, proposes dependency changes that its author says reduce the audit to zero. It was still open and marked dirty by GitHub on October 6, so those changes are not evidence about the default branch we measured.

The repository also has no test script in its root package file. Open issue 337 asks for browser-level coverage of the standalone video model picker because helper tests would miss failures in search, selection, and image fallback behavior. That is a narrow issue, but it points at a broader adoption problem: the interface spans many studios while the standard root command gives a buyer no runnable regression suite.

October activity is current, while the release docs lag

GitHub recorded 29,690 stars and a last push on October 3, 2026. The open queue contained 17 issues and 10 pull requests when checked, rather than 27 bugs. Release v2.0.0 shipped on May 23 with Windows, macOS, AppImage, and Debian assets. This is active work, not a repository left untouched after its installer release.

The README is detailed enough to get a contributor oriented, but its packaging story drifts. The download table still links v1.0.9 installers while GitHub lists v2.0.0 as latest. Model totals also move from 400-plus near the top to 420-plus later, while the repository description says 600-plus. None of that caused our build failure, though it makes the exact product boundary harder to pin down.

Choose the interface only if Muapi is part of the plan

At commit 9f2ed4f, the source app installed but did not build, and npm audit counted 36 known vulnerabilities. The packaged desktop app can still make sense for someone who already wants Muapi and values one interface across many media jobs. If local control is the reason you are shopping, start with ComfyUI or InvokeAI and accept a narrower catalog rather than calling a hosted gateway self-hosted.

Alternatives

ProjectWhat it isPick it when
ComfyUI gh↗A local, node-based interface for composing image, video, and audio generation graphs.pick this instead when local model control and reusable graph workflows matter more than a single hosted catalog.
InvokeAI gh↗A self-hosted creative interface and workflow system centered on local image generation.pick this instead when image work, asset organization, and local operation matter more than access to many hosted video models.
Stable Diffusion WebUI gh↗A widely used local Stable Diffusion web interface with a large extension ecosystem.pick this instead when you need a familiar local image UI and are comfortable managing models and extensions yourself.

Sources

  1. Open Generative AI README
  2. Open Generative AI repository
  3. Open Generative AI v2.0.0 release
  4. Windows local generation failure report
  5. Dependency audit fix pull request
  6. Video picker coverage issue

More ai tools reviews

universal-modder · DeepEP-Ascend · DeepGEMM-Ascend · hypoarena · jeeves · faster-whisper · the whole board →