Limits
Draft, awaiting the owner's review. This text is not yet in force, and it is not legal advice. Drafted 2026-09-29; the version in force will carry its own date.
OSCR runs for free, within the free plans of the services that host it. For this reason, each account and the whole service have daily limits. When a limit is reached, OSCR shows a message that says so, and the static pages stay up. The limits of Git hosting (file sizes, pushes) are set by GitHub and listed on the hosting limits page.
What one account may do in 24 hours
| What | At most |
|---|---|
| Authorized actions | 100 |
| Repositories created | 10 |
| Repositories linked | 20 |
| Research issues opened | 20 |
| Stars, follows, lists and profile changes | 300 |
| Changes to your notifications | 500 |
| Changes to your tokens and webhooks | 50 |
| Commit statuses posted | 300 |
| Reports | 20 |
| Moderation decisions | 500 |
| Appeals | 5 |
| Blocks and unblocks | 100 |
| Changes to interaction limits | 20 |
| Data-rights requests | 3 |
| Security alerts triaged | 200 |
| Code-scanning uploads | 100 |
| Changes to private vulnerability reports | 50 |
| Changes to organizations and teams | 300 |
| Changes to your account's security | 200 |
| Discussions opened | 20 |
| Votes | 200 |
| Projects created | 10 |
| Changes to your projects | 300 |
| Changes to snippets (edits, comments and stars) | 300 |
Reports made without an account: 50 a day for all of them together.
What one account keeps
| Stars | 3,000 |
| Follows and watches | 2,000 |
| Star lists | 32 |
| Personal tokens | 20 |
| Webhooks | 10 |
| Blocked people | 1,000 |
| Data-rights requests waiting | 3 |
Sizes
| A comment, an issue's text | 65,536 characters |
| A change made in the browser | 1 MiB, 100 files |
| A release's file sent through OSCR | 25 MiB (larger on GitHub's own page) |
The public API
Each token: 60 requests a minute and 1,000 a day. An address sending 20 wrong tokens in a minute waits for the next minute.
What the whole service may do in a day
The GitHub side writes at most 5,000 rows to its database a day, every account together. The server answers about 100,000 requests a day in all. Beyond that number, its routes answer with an error until midnight UTC, and every static page stays up.
What it says
- An account's limit
- "You have reached … in the last 24 hours, the most one account may: please come back tomorrow."
- The GitHub side's day
- "The GitHub side has used its share of today's database writes. Please try again tomorrow."
- The search's day
- "The search has used its daily quota. Please try again tomorrow; meanwhile, Browse and the DOI lookup are static and always work."
- Before the GitHub side opens to everyone
- "The GitHub side opens to the public with its content rules; until then, only the owner of the registry can act here."