Stringers
andrewyng/openworker · andrewyng

OpenWorker: Andrew Ng's open-source "AI coworker" passes 10k stars in 9 days on the strength of his name

What it is An open-source AI coworker that runs on your computer, uses your own model key, finishes work in your files and office apps, delivers finished output, and asks you before acting.

Why it took off Andrew Ng himself posted about it to his 1.88M followers, and media picked it up on their own, pushing it to #1 on GitHub Trending. It also rode the wave of Claude Cowork educating the category, and "open source, local, not locked to one model" is exactly the opposite of what people were looking for.

DHow you could follow Don't build yet another open-source Cowork. Use its formula: when a big company launches a new paid agent feature, ship an open-source version first, or build a vertical "expert coworker" for a specific role, or build approval/security plugins for these desktop agents.

Grade D: its stars come from Andrew Ng's name, which followers can't copy. The "open-source Cowork" slot is already crowded, with several projects over 10k stars such as OpenWork. What you can learn is the playbook, not the project itself. Public / widely discussed
Data (updated daily) · Repo created 2026-07-20 · 18,914 stars · 7 days +134
GitHub · stars
10k15k20k07-2910-1310-2511-0211-0819k
Data 2026-07-29 → 2026-11-08 (103 days, 25 observations). Points before 10-28 come from deeply / archive backfill, not every day has one

OpenWorker is an open-source desktop AI coworker. You install it on your Mac or Windows PC, use your own model key, complete work in your files and office apps, and deliver output you can use directly. It was released in Jul 23, passed 10k stars in 9 days, and by Nov 6 18,906 had 2,690 forks and stars in total. Below is what it is, how the stars came about, who it competes with, and what you can and can't learn from it if you want to build a project that gets similar stars.

One tweet: "We want an open option"

On Jul 23 2026, at 16:45 PM UTC, Andrew Ng posted on X:

Announcing OpenWorker! An open-source agent that doesn't just chat with you, but delivers finished work -- like hand you a polished document, send a slack message, or update a calendar entry.

The second half states the stance: it isn't tied to any one model provider. GPT, Claude, Gemini, Kimi, GLM, and DeepSeek all work, and you can run everything locally with Ollama. "@rohitcprasad and I built OpenWorker because AI coworkers are an important way to get work done, and we want an open, privacy-respecting option that isn't tied to a specific model."

When the tweet went out, Andrew Ng had about 1.88M followers on X. MarkTechPost published "Andrew Ng Just Released OpenWorker" the same day, Enterprise DNA followed the next day, and Medium, a Japanese note.com post, Reddit's r/LocalLLaMA and r/AIDeveloperNews, and YouTube breakdown videos came out one after another, with headlines almost all of the form "Andrew Ng released...". Around Jul 27 it hit #1 on GitHub's daily trending list (someone on LinkedIn posted a screenshot), and by Jul 29 it had 10,347 stars.

What it actually does

In one line: an open, model-neutral version of Claude Cowork.

  • It delivers finished output, not chat. Say "prepare a client briefing", "sort out my calendar", or "check how far this release has progressed in Jira and GitHub", and it breaks the task into steps, works across your files and apps, and hands back a document, spreadsheet, web page, or a Slack reply.
  • Connects to 25+ office tools. GitHub, Slack, Jira, Notion, Linear, HubSpot, Gmail, Google Calendar, and more. Any MCP tool can also be connected. Mention @OpenWorker in Slack, or open a session on the desktop, and results return to the original thread.
  • Pick any model. The README lists more than twenty model vendors and aggregation platforms, plus local options such as Ollama, llama.cpp, vLLM, and LM Studio. You can also log in with an OpenRouter account or a ChatGPT subscription.
  • Asks before acting. It requires your approval before sending messages, changing your calendar, or running commands. A set of dangerous operations can only be triggered by a human. Every tool call is logged for audit. Commands can run inside an NVIDIA OpenShell container sandbox, and on Mac it uses the built-in system sandbox.

Technically, it's a desktop shell plus a local Python agent service, built on Andrew Ng's other open-source project aisuite (16k stars).

The Aug 25 release shifted the focus: "early users found it especially well suited to cybersecurity," so it added three ready-made "security coworkers" for code vulnerability scanning, dependency supply-chain checks, and cloud configuration auditing. That post drew 274k views, 3,564 likes, and 3,142 bookmarks (X, 11-06). The README's first paragraph now reads "the first security expert coworkers are now available."

Where the stars came from

DateCumulative starsWhat happened
7-23—Andrew Ng posts the release tweet, media follows the same day
Around 7-27—#1 on GitHub Trending that day
7-2910,347Day 7 after launch (the figure from a LinkedIn post)
8-25—Security-version launch tweet, 274k views
9-28—Tweets again, tying it to a company AI breach and NVIDIA OpenShell
10-0918,479For about two months before that, roughly +110 a day on average, slowing over time (estimated)
11-0618,906Since October, +10 to +15,11-02 a day. The latest peak was +48 in a single day

(GitHub stars; there are no daily counts before 10-09, and the rows in between only show events, not star counts.)

First, Andrew Ng himself. He is the main engine, full stop. He is one of the biggest names in AI education (Coursera, DeepLearning.AI), and his GitHub repos together have 55k stars. One post pushed the repo onto the trending page on day one, and trending brought a second wave of exposure.

Second, media and creators came to it on their own. No pitching needed. "What Andrew Ng just released" was news in itself.

Third, "Claude Cowork alternatives" listicles. Composio's "Best Claude Cowork Alternatives" says: if you want privacy and model freedom, try OpenWorker or OpenWork. Much of the long-tail traffic probably comes from comparison posts like this (inferred).

What didn't take off: The repo was submitted to Hacker News 3 times, peaking at 5 points. The only comment asked: "How is it different from literally any other wrapper?" August's security pivot and September's NVIDIA tie-in did not bring a clear second wave of stars.

Who it's competing with

This slot is very crowded, and OpenWorker arrived late.

ProjectLaunchedScaleHow it differs from OpenWorker
Claude Cowork(Anthropic)2026-01Category pioneer, paidClosed source, tied to Claude models and accounts. OpenWorker was built as the opposite.
Microsoft Copilot Cowork2026 (date unverified)M365 enterprise usersTied to the Microsoft ecosystem
different-ai/openwork2026-01-1424,424 stars, Show HN 231 pointsThe earliest "open-source Cowork," half a year earlier, with more stars
accomplish-ai/coworker2026-01-1410,808 starsSimilar local desktop agent
eigent2025-0715,754 starsMulti-agent collaboration; OpenWorker is a single agent with approvals
OpenClaw2025-11394K starsPersonal agent that runs through chat apps, a phenomenon
goose2024-0856,296 starsLeans toward developers
Open Interpreter2023-0768,815 starsVeteran "let the model operate your computer" tool
UI-TARS-desktop / Agent-S202539.6k / 12.9k starsReads the screen and clicks buttons; OpenWorker uses APIs and connectors

The most telling case is OpenWork: no big name, it did the same thing half a year earlier and reached 24k stars. That shows the "open-source Cowork" category alone can reach tens of thousands of stars. Andrew Ng's name let a latecomer reach the same range half a year later.

What it still gets wrong

  • Differentiation came after the traction. At launch the selling points were "open, private, model-neutral," and OpenWork and others already had those. The approval ladder, audit, sandbox, and security coworker were added after August. So far there's no evidence those additions brought in many more users.
  • The community couldn't keep up. At the end of July someone counted: 159 open PRs, only 8 merged. There are still 202 open issues and PRs (GitHub, 11-06).
  • The Windows build is still unsigned. The README says SmartScreen will warn users and that signing is "in progress."
  • How many people actually use it is unknown. The website publishes no download or active-user numbers. 19k stars doesn't mean 19k people are using it.

If it were you

Bottom line: Don't build "yet another open-source Cowork." Its stars came from Andrew Ng's name, which you won't get. The category already has OpenWork, eigent, goose, and other projects with over ten thousand stars, and without a famous name a latecomer will likely stall at a few hundred. What's worth learning is the formula, and the part it didn't finish.

Who it suits: developers who already work in a specific industry (security, ops, sales, finance, legal) and can clearly define what finished product an agent should hand over. Or people who already have tens of thousands of followers on X or GitHub and want to launch a flagship project.

Who it doesn't suit: people hoping to ride the "open-source Claude Cowork" title without a large audience, and people trying to build a general desktop agent that competes feature-for-feature with the dozen-plus existing projects.

How to do it:

  1. Use the formula, but pick a category nobody has built yet. "A paid feature a big company just launched + open source, local, model-neutral" is the most reliable way to get stars on GitHub. Watch for agent features big companies release as subscriptions, and build the open-source version in the first few weeks after they launch. OpenWork got 24k stars that way: it shipped first and didn't rely on a name.
  2. Build a vertical "expert colleague," not a general assistant. OpenWorker only moved into security coworker after users started using it for security work. It took just the first step: one specific role, a fixed toolset, and a fixed deliverable format (for example, "a weekly cloud billing anomaly report for small companies" or "automatic triage of issues and PRs for open-source maintainers"). A role done well is easier to remember than a hundred connectors (inferred).
  3. Fill the gap it didn't close. Build an "approval and audit layer" that plugs into hosts like OpenWorker, OpenWork, and goose, or a security scanning plugin for these desktop agents. The more hosts you support, the more readers you reach.

How to get stars: Tie the launch tweet to a feature a big company just released, and state in one line "the open-source version of it / the part it can't do." Pair it with a screen recording of the agent finishing a real task, not a feature list. In launch week, go to r/LocalLLaMA on Reddit and to the authors of "X alternatives" comparison posts. "Local, not tied to a model" is what this crowd buys into most. Respond to PRs and issues. OpenWorker was shamed on LinkedIn for "159 PRs, only 8 merged," and that hurts a nameless project far more.

When it's too late: The "open-source Cowork" slot is already closed. The strategy of open-sourcing a big company's paid agent feature still works, but each new feature's window is usually only a few weeks after launch, and whoever ships first gets the stars.

Signs you picked wrong: Searching GitHub for your category already turns up open-source alternatives with thousands of stars. Or your launch tweet, with a recording, hasn't passed ten thousand views in a week and the repo is stuck in double-digit stars. Either the category isn't hot enough, or your version isn't clearly better than what exists. Switch directions.

GitHub repo ↗

Research notes: competitor table, acquisition evidence, full research report
Competitors
NameWhereLaunchedScaleHow it differs from this one
Claude CoworkBig-company features2026-01Category pioneer, paid subscriptionClosed source, tied to Claude. OpenWorker is open source, model-neutral, and local.
Microsoft Copilot CoworkBig-company features2026 (unverified)M365 enterprise usersTied to the Microsoft ecosystem. OpenWorker uses its own key and runs locally.
different-ai/openworkOpen source2026-01-1424,424 stars, Show HN 231 pointsAn open-source Cowork alternative from half a year earlier, built on OpenCode. OpenWorker overtook it on the strength of a famous name and added governance and security.
accomplish-ai/coworkerOpen source2026-01-1410,808 starSimilar local desktop agent. OpenWorker has more complete connectors and governance.
eigent-ai/eigentOpen source2025-0715,754 starMulti-agent workforce. OpenWorker is a single agent with approval governance.
OpenClawOpen source2025-11394,041 starPersonal agent through IM. OpenWorker has a desktop GUI, approvals by default, and auditability.
gooseOpen source2024-0856,296 starLeans toward developers. OpenWorker leans toward office and security coworkers.
Open InterpreterOpen source2023-0768,815 starVeteran local computer agent. OpenWorker has ready-made connectors, a GUI, and governance.
UI-TARS-desktop / Agent-SOpen source2024-202539.6k / 12.9k starScreen-control GUI agent. OpenWorker uses API connectors.
Where users come from
  • Verified Founder's personal accounts (X/LinkedIn/Facebook): Andrew Ng's X launch post 7-23 (status/2080333504446108104). A security update post 8-25 had 274k views and 3,564 likes (x-radar). A post 9-28 used a security incident and NVIDIA OpenShell as the hook.
  • Verified AI media and creator reposts: MarkTechPost 7-23, Enterprise DNA 7-24, several Medium posts, note.com, YouTube, Reddit r/LocalLLaMA
  • Verified GitHub trending / Trendshift: LinkedIn post by r-katiyar: ranked #1 on GitHub trending that day. The README carries a Trendshift badge.
  • Verified SEO alternatives listicles: Composio's "Best Claude Cowork Alternatives" lists OpenWorker/OpenWork first.
  • Inferred Hacker News: 3 submissions, peak 5 points (HN Algolia). It did not take off.
  • Verified Big-company and model-provider partnerships: integrates with NVIDIA OpenShell, OpenRouter account login, Volcano Engine/BytePlus Ark, and others.

Why andrewyng/openworker (OpenWorker) took off

Channel: GitHub | Research date: 2026-11-06 | Data card: gh_andrewyng/openworker

One line

OpenWorker is an open-source, local-first desktop AI "coworker" built by Andrew Ng and Rohit Prasad, in the same vein as Claude Cowork. It consists of a Mac/Windows desktop app plus a local Python agent service. It uses your own model key (or runs locally on Ollama), connects to 25+ office tools, and delivers finished files and messages. Its selling points are an approval gate, audit, and sandboxing, and since August it has pushed security coworkers.

Conclusion: nearly all of its stars came from Andrew Ng's personal launch reach (about 1.88M followers on X, plus LinkedIn/Facebook and organic AI media reposts), which hit in one burst in late July. The product itself sits in a category that already has many open-source competitors. Its differentiation (governance/security, model neutrality) didn't cause the traction. It was positioning used afterward to keep the community and find a second growth curve. It is now in the long tail: about +10 a day.

1. Growth data

  • Repo created 2026-07-20, first public release 2026-07-23 (Andrew Ng's X launch post, x.com/AndrewYNg/status/2080333504446108104).
  • Got to 10,347 stars within 9 days of release (LinkedIn post by Mervin Praison, 2026-07-29). Around 27 July it reached #1 on GitHub's daily trending (LinkedIn post by r-katiyar: "Today's #1 trending repo on github is OpenWorker"). The README carries a Trendshift badge.
  • Our GitHub tracking: 2026-10-09 was 18,479,2026-11-06, 18,906 is 18,909 (live from the GitHub API), forks 2,690. Since August, growth has mostly stalled at about 10 to 15 a day. In the last 7 days it added +164,11-02, with a single-day peak of +48.
  • The card's "trending_days_any=0" is because we only started collecting this repo on 10-28, and GitHub trending generally only admits repos that are about 60+ days old. That rule did not stop it in July, though: it actually hit the top of trending, as noted above. So the recall data sees the tail, not the traction period.
  • A 11-02 spike: that day merged a batch of fixes (Ollama/Windows/reviewer, PRs #820–824), and 10-31 merged a big batch of "auto-approve decision reviewer" features. We found no major creator reposts in the X corpus that day; the cause is unverified. Release cadence: v0.1.4 (7-22), then v0.2.0 (8-24, security workflow), then v0.3.0 (9-30, NVIDIA OpenShell sandbox integration), then v0.3.1 (10-05).

II. Competitors

ProductFormLaunchedScaleHow it differs from OpenWorker
Claude Cowork(Anthropic)Big-company features2026-01 (research preview)Category pioneer, paid subscriptionClosed source, tied to Claude models, cloud accounts; OpenWorker's pitch is being the open, model-neutral, privacy-first alternative
Microsoft Copilot CoworkBig-company features2026 (exact date unverified)Enterprise M365 usersTied to the Microsoft ecosystem; Composio's comparison piece lists it alongside OpenWorker
different-ai/openworkOpen source2026-01-1424,424 stars; Show HN 231 pointsThe earliest "open-source Claude Cowork alternative," built on OpenCode; OpenWorker came half a year later and has near-equal stars, but it rides a name, not first-mover advantage
accomplish-ai/coworker (formerly Openwork)Open source2026-01-1410,808 starA similar local desktop agent, built on OpenCode + dev-browser
eigent-ai/eigentOpen source2025-0715,754 starA multi-agent desktop "workforce"; OpenWorker is single-agent with governance
openclaw/openclawOpen source2025-11394,041 starA breakout personal-agent project that runs over IM channels, self-hosted; OpenWorker emphasizes approval gates and security, positioning itself as auditable for enterprise and security teams
goose(Block → aaif-goose)Open source2024-0856,296 starA developer-oriented general agent; OpenWorker targets non-technical office work and a security-focused coworker
Open InterpreterOpen source2023-0768,815 starAn established local computer agent; OpenWorker ships a ready-made GUI, connectors, and governance
bytedance/UI-TARS-desktop, simular Agent-SOpen source202539.6k / 12.9k starGUI-driven computer-use; OpenWorker goes through APIs and connectors rather than reading the screen

Verdict: the category is very crowded, OpenWorker arrived half a year late, and it has no exclusive feature edge (the only HN comment: "How is it different from literally any other wrapper?", news.ycombinator.com/item?id=49032886).

III. Growth levers (where users come from)

  1. Andrew Ng's personal post (confirmed): 7-23 X post + video, cross-posted to Facebook and LinkedIn. About 1.88M followers on X (x-radar corpus). 8-25's "safe workflow" update post: 274,495 views, 3,564 likes, 447 reposts, 3,142 bookmarks (x-radar). 9-28 posted it riding the "OpenAI–Hugging Face hack" news plus NVIDIA OpenShell, @黄仁勋 (https://x.com/AndrewYNg/status/2104660347730969087).
  2. Organic pickup by AI media and self-media (confirmed): MarkTechPost 7-23 (https://www.marktechpost.com/2026/07/23/andrew-ng-just-released-openworker-...), Enterprise DNA 7-24, multiple Medium posts, Japanese note.com, Productize reviews, YouTube breakdowns, Reddit r/LocalLLaMA and r/AIDeveloperNews, with headlines that were almost all "Andrew Ng releases...".
  3. GitHub trending #1 + Trendshift (confirmed): The name-driven first-day stars pushed it onto trending, and trending brought a second round of exposure.
  4. "Claude Cowork open-source alternative" SEO lists (confirmed): Composio's "Best Claude Cowork Alternatives" says "For privacy and model freedom, start with OpenWorker or OpenWork," and long-tail traffic comes from comparison pieces like this.
  5. Hacker News (didn't take off): 3 submissions, highest 5 points (HN Algolia). Not a source.
  6. Big-company endorsements / ecosystem partnerships (confirmed): Integrates NVIDIA OpenShell and carries the official narrative; integrates OpenRouter account login, BytePlus/Volcano Ark, Inkling and other model vendors, as listed in the README. This amounts to model vendors treating it as a distribution channel, which adds limited star value.
  7. Paid acquisition: none found, and none needed.

4. Why it made the list

  • Star power is the main driver: Andrew Ng is the #1 AI education IP (Coursera/DeepLearning.AI), and his account has owner_total_stars 55,083, with his previous project aisuite at 16,380 stars. It passed 10K in 9 days, and it has never grown at that rate since. A classic case of a famous name cashing in once.
  • Timing: by 2026 H1, Claude Cowork had educated the market on the "AI coworker that delivers finished work" category, and demand for open alternatives was already validated (OpenWork's Show HN scored 231 points). Andrew Ng entered once demand had matured.
  • Narrative: "open, private, model-neutral" is the counter-narrative to the closed-source lock-in of Anthropic and OpenAI, and local Ollama support resonated with the r/LocalLLaMA crowd.
  • Retention narrative: August found users were using it for security, and it pivoted to a "security coworker" (code vulnerability scanning, supply chain, cloud configuration). It kept pushing the message via security news and NVIDIA's endorsement, filling a gap where closed frontier models refuse security tasks. But the star curve shows this pivot did not bring a clear second growth wave (daily gains from 8 through October were on the order of 10–20).
  • High fork ratio (14%): mostly developers forking to run the source or try it out. There are also many external PRs (a LinkedIn post said 159 open PRs against 8 merged at the time), suggesting wide interest but a fairly closed community governance.

5. Differentiation

  • Governance first: hard floors (dangerous operations that can never be auto-approved), a "gradually earned autonomy" approval ladder, an audit trail that records approval sources, a reviewer model with a circuit breaker, NVIDIA OpenShell / macOS built-in sandbox / Windows hidden-account sandbox; the default command allowlist is empty.
  • Model neutrality taken to the extreme: 20+ model vendors plus a full local inference stack, supporting OpenRouter account login and ChatGPT subscriptions.
  • Vertical coworker: the security coworker goes first, aimed at security teams ("open harness, auditable, no backdoors").
  • Is that why it took off? No. The launch-period pitch (late July) was just "Andrew Ng's open-source Cowork." The security and governance positioning only got reinforced after August. Similar-feature projects like OpenWork, without a famous name, still reached 1~20k stars, which suggests star counts are mainly set by category heat plus the name. Differentiation affects whether it becomes the one enterprise or security teams actually adopt, and there's no usage evidence for that yet.

6. Visibility and copycats

  • Visibility: widely discussed. Andrew Ng posted about it several times, outlets like MarkTechPost covered it, and multiple Cowork-alternative comparison pieces list it. As an open-source project, it has no revenue question.
  • Copycats: found no clear project that copied OpenWorker. It was itself a latecomer in the open Claude Cowork alternative wave.

VII. What to take away

  • "Big-name + an open/privacy/model-neutral take on a mature category" is the most reliable formula for GitHub stars. Without a big name, the substitute is being first (OpenWork launched half a year earlier).
  • After launch, watch how users actually use it, then narrow the positioning (general office work → security coworker), and repeatedly create reasons to post by pairing hot security events with big-company tool endorsements.
  • Treat model-vendor integrations (OpenRouter, Volcano Ark, etc.) as partnership distribution slots.

8. Not sure

  • Actual downloads and active users are unknown (openworker.com publishes no figures). Stars ≠ usage.
  • The cause of the 11-02 mini-peak is unverified.
  • 7-23 发布帖本身的浏览/点赞数未拿到(x-radar 语料只覆盖到 8-25 那帖)。
  • Launch dates for Claude Cowork and Copilot Cowork are based on public reporting and memory, not verified item by item.

This article was written by AI from public data and the data we collect daily. Numbers are sourced, and inferences are labeled.