Switch card · CODE HOSTING

GitHub Cursor Origin

CONFIDENCE: LOW· updated 2026-08-20· n=1 unaffiliated first-hand, 16 sources on the face, 25-row ledger· vendor content discounted

This is a ⇄, not a migration — and on this card that is not a hedge, it is what the vendor built. Cursor’s own changelog says pushes for synced repos “keep going to GitHub, which stays the source of truth for anything started there”. A Japanese engineer who synced his own repository titled his write-up 「Cursor Origin は GitHub を置き換えない」Origin does not replace GitHub — and meant it as praise for the design. So the two questions come apart: should I mirror? is cheap, reversible and mostly a matter of taste. Should I move the source of truth? is a different decision, and every first-hand account in this card’s corpus says the same thing about it: not yet. This card does not rank the two products. It reports what each vendor logged, what one engineer counted when he synced 342 pull requests, and which claims remain unmeasured across all 25 sources in its ledger.

The fact that decides it, and both vendors published it themselves. On 2026-08-17 GitHub logged “Incident with GitHub.com”, impact critical, 13:40:03Z–21:15:46Z. The same day Cursor shipped Origin and the week’s headlines called it a GitHub alternative. Cursor’s own status page logged this: “GitHub degradation affecting some Cursor services”, impact major, 14:34:00Z–20:40:02Z, and its affected-components list reads ['Automations', 'Review Agents', 'Cloud Agents', 'Origin']. The alternative was degraded by the thing it is an alternative to, on launch day, by its own record. What that does not say, and it should not be stretched to: neither log tells you how a repo created natively on Origin behaved. What it does tell you is that the sync — the feature that makes trying Origin cost nothing — is a live dependency on GitHub’s API.

The decision

CHOOSE ORIGIN IF →

  • You want a better review surface and you are not moving your code. Syncing costs close to nothing and is reversible: a Japanese engineer who mirrored his own repository reports 83 branches and 342 closed pull requests arriving whole — bodies, comments, even bot comments — with comments syncing both ways. His own summary of the trade: “試すのはコストがほぼゼロ。ミラーなので壊れないし、やめても GitHub 側は無傷” (trying it costs almost nothing; it is a mirror, so nothing breaks, and if you stop, GitHub is untouched).
  • Your team writes real pull-request descriptions. Origin’s headline review feature, Code Tour, was tested across three of one engineer’s own PRs: a long written body produced a full summary with review points; a two-line body produced 「No matching steps」 — nothing at all; a third claimed “Empty diff” and then guessed from the branch name. His conclusion: “材料がなければ何も出ない” — it reformats a description that exists, it does not write one from the diff. This is a multiplier on a habit, not a substitute for it.
  • You are running many agents at once and feel the write bottleneck. That is the case Origin was announced for — 2026-06-16, as “a git forge for the agentic era”, two months before the beta. Its unit is not the pull request but a change, a versioned diff, and draft is enforced by the model rather than by configuration. But the load figures behind that pitch — 22.6 commits/sec, ~296,000 clones/hour — are Cursor’s own demo numbers, and the engineer who ran a real PR through the product says plainly he could not verify them.
  • Your reason is GitHub’s reliability, and you have looked at the record rather than the headlines. Run the same query against both vendors, because one of these numbers is meaningless without the other. GitHub’s status API returns 50 incidents, 2026-06-17 to 2026-08-20 (~64 days) — 9 critical, 11 major. Cursor’s, same endpoint and same method, returns 50 incidents, 2026-06-22 to 2026-08-19 (~59 days) — 3 critical, 10 major. Both files hit the same 50-record cap; Cursor fills it in a shorter window. Fewer of Cursor’s are critical — and exactly one incident in that entire file names Origin, because Origin only entered beta on 2026-08-17, three days before this sweep. An earlier draft of this card published GitHub’s number alone. The much-repeated “257 outages in a year” is real — LeadDev, 2026-05-07, from IncidentHub’s tracked data: 257 incidents May 2025–April 2026, 48 of them major, against GitLab 132 and Bitbucket 27 on the same index. An earlier draft of this card said it could not be verified, and was wrong. Cursor has, across this card’s 25 sources, no twelve-month figure — Origin is four months younger than that window.

CHOOSE GITHUB IF →

  • You were going to move because the press called Origin a GitHub alternative. In Ask HN: Alternatives to GitHub — the thread where people were actually asked — Cursor is named in 10 of 421 comments. Forgejo is named in 60, GitLab in 50, Gitea in 49, Codeberg in 43. The answer developers gave was self-hosted forges, by five to six times. (Counts are comments containing the term, walked from the thread. On inspection 8 of the 10 “cursor” hits genuinely name Cursor Origin — the other two mean the editor — so 10 is a ceiling. An earlier draft blamed a git origin collision; there are none in the thread.)
  • You depend on Issues, Actions or branch protection. None of the three comes across the sync. Measured first-hand on one real repository: Issues — “the tab does not exist”; Actions checks and secrets — the Checks column stays “No checks”; branch protection — “No rulesets protect this repository yet”. Origin has its own protection rules you can build, but they are rebuilt, not imported.
  • You need a merge gate on day one. A first-hand test found draft status enforced by the model itself — Mergeable: no, blocker change-is-draft, with no rulesets configured. And then the reverse: the moment draft was lifted, “Mergeable: yes” with zero checks reported and “CI passing: yes”“何も無ければ通過扱い”, nothing configured is treated as passing. Bare Origin stops nothing after a change is marked ready. There is also no Actions-equivalent in the product; CI arrives through Apps.
  • You want the data terms first. The engineer who mirrored his own repo put it as the reason not to move yet, listing 「保持期間、保管場所、学習への利用、サブプロセッサ、移行ツール」 as unpublished. Two of his five are wrong, and we checked rather than repeating him: Two widely-repeated claims about Cursor publishing nothing are false, and this card checked: its security page publishes a subprocessor list “re-reviewed annually” and a training policy — “When enabled, we will not train on your data”, free tier included — plus SOC 2 Type II on request. What we did not establish either way is a stated retention period; cursor.com/legal/privacy answered HTTP 200 and was not opened this sweep, so this card makes no claim about it.
  • You are running an open-source project. Nothing in this sweep suggests Origin replaces the parts of GitHub an OSS project lives on — Issues do not sync at all, and stars, forks and discussions were not found in any first-hand account here.

Works with your setup?

Who is
source of truth
Issues
sync
Actions
sync
Branch protection
imported
Merge gate
out of the box
Public
status log
Independently
load-tested
GitHub✓ itself✓ n/a — native✓ n/a — native✓ n/a — native✓ checks + protection✓ per-incident API⚠ not assessed here
Cursor Origin (synced repo)✗ GitHub stays source of truth✗ tab does not exist✗ “No checks”✗ rebuilt, not imported⚠ draft blocks; ready does not✓ per-incident API✗ vendor demo figures only
Cursor Origin (native repo)✓ Origin⚠ not observed this sweep✗ CI via Apps⚠ rules exist; not tested here⚠ same draft/ready behaviour✓ per-incident API✗ vendor demo figures only

Sentiment — independent voices only

There is no sentiment bar on this card, and the reason is the finding. Three days after a launch announcement with 25.9 million views, this sweep found four hands-on write-ups of Origin in any language. One is a Cursor Ambassador (his Qiita profile: “Cursor Ambassador Regional Leader(East Asia)”). One carries a Cursor referral link twice, under a visible 広告 — advertising — label. One is a translation of someone else’s video, by its own description. That leaves one unaffiliated first-hand account, and his conclusion is that it is too early to move. A proportional bar over one voice would be fake precision, so this card does not draw one — the two vendors’ own status logs carry the verdict instead. Both earlier drafts of this card counted the affiliated voices, once at n=3 and once at n=2, before a verifier fetched their pages. That is why rule ③ now exists.

Weighted evidence

Show all 16 sourcesShow fewer

Why confidence is LOW

Cursor's own status page listed Origin as degraded — on launch day GitHub's own log: critical, 13:40:03Z→21:15:46Z, 7h 35m Cursor's own log: major, 14:34→20:40, and it names GitHub as the cause “Ask HN: Alternatives to GitHub” — Cursor named in 10 of 421 comments Forgejo 60 · GitLab 50 · Gitea 49 · Codeberg 43 — the actual answers 342 PRs and 83 branches sync. Issues, Actions and branch protection don't after `origin pr ready`: “CI passing: yes” with zero checks reported Origin was announced 2026-06-16 — the beta date is the coincidence 4 hands-on accounts exist: 2 Cursor-affiliated, 1 a repost, 1 clean GitHub 257 incidents in a year (48 major) · GitLab 132 · Bitbucket 27

Coverage — what we read, what we skipped

Swept 2026-08-20 with agent-reach, numbers locked before any prose was written. get_status under-reported again — it printed 3/16 个渠道可用 and listed Reddit and Twitter/X as not installed, immediately before both returned results. That is the fourth time this project has recorded it. Read and used: both vendors’ status APIs, Hacker News (the 421-comment thread walked comment-by-comment rather than counted by search), Cursor’s own security page, Twitter/X, Reddit, 小红书 (19 notes surfaced), B站, and six Japanese sources — which is where all three first-hand hands-on accounts came from. Tested rather than assumed: a widely-repeated report says Cursor publishes no subprocessor list and no training policy. One fetch of its security page refutes both, and this card says so even though it cuts against the sceptical read. The same report’s claims about data retention and migration tooling we did not test, so they appear nowhere on this card. Run for both sides after a verifier caught it one-sided: the incident count. GitHub 50 records / 9 critical / 11 major over 64 days; Cursor 50 / 3 / 10 over 59. An earlier draft published only GitHub’s. A claim this card got wrong and has withdrawn: an earlier draft said five times that the “257 outages in a year” figure could not be verified. It can. LeadDev published it on 2026-05-07 from IncidentHub’s dataset, which states its methodology and carries a cross-forge comparison (GitHub 257, GitLab 132, Bitbucket 27, May 2025–April 2026). Our stated reason was wrong too: the status API caps at 50 records beginning 2026-06-17, four months after that window closes, so it was never the instrument that could settle it. What genuinely lacks a counterpart across these 25 sources is Cursor’s twelve-month figure, because Origin is younger than the window — and that blank is about the product’s age, not its reliability. Cursor’s demo throughput figures — across these 25 sources no one has reproduced them, including the engineer who ran a real pull request through the product. Not attempted, and therefore not gaps: 掘金, 知乎, V2EX, LinkedIn, YouTube, cursor.com/legal/privacy (HTTP 200, not opened), and first-hand Gitea or Forgejo metrics — the last matters, because Forgejo and Gitea are what the Ask HN thread actually recommended and this card does not measure them. One fetch returned something other than it promised: docs.cursor.com/en/origin answers HTTP 200 but renders the generic documentation index rather than an Origin page. That is recorded as what we received — not as evidence that Origin is undocumented. What would change this card: anyone reproducing the 22.6-commits/sec figure outside a Cursor demo; a stated retention period for natively-hosted repositories; and a first-hand account of how a native Origin repo behaved during a GitHub outage, which is the one thing the two status logs cannot tell you.

Show every source we read (25) Hide the ledger

The 25 sources in this card's ledger — 16 of them quoted above. Sources we read and did not quote are listed too, with why. This is the ledger, not a claim of exhaustiveness: anything the sweep read but deliberately left out of it is named in the coverage note above, with the reason. Reliability and neutrality are our own scores, not the publisher's. Vendor-owned pages are marked in the notes and never carry the verdict.

Straight answers

is cursor origin a github replacement?
Not for code you already have. Cursor’s own changelog says pushes for synced repositories keep going to GitHub, which stays the source of truth. A Japanese engineer who mirrored his own repo titled his write-up 「Cursor Origin は GitHub を置き換えない」Origin does not replace GitHub — and meant it approvingly. You can host natively on Origin, and Origin can host natively; that is a separate and later decision.
did cursor origin go down when github went down?
Cursor’s own status page says yes. On 2026-08-17 it logged “GitHub degradation affecting some Cursor services”, impact major, 14:34–20:40 UTC, and listed Origin among the affected components alongside Automations, Review Agents and Cloud Agents. The important limit: that log covers Cursor’s services and the GitHub sync. It does not tell you how a repo hosted natively on Origin behaved.
how long was the github outage on august 17 2026?
GitHub gives two numbers of its own: its incident timestamps span 7h 35m (13:40:03Z–21:15:46Z, impact critical), while its own resolution note reads “from 13:28–21:15 UTC (7h 47m)… At peak, web/API error rates were approximately 20%”. Cursor’s log gives 6 hours 6 minutes for its own exposure, 14:34 to 20:40. Both are primary and both are right: they measured different things.
what syncs from github to cursor origin?
Measured first-hand on one real repository: commits, branches and tags (83 branches) and pull requests (342 closed ones, whole — bodies, comments, even bot comments, syncing both ways). Issues do not sync — the tab does not exist. GitHub Actions checks and secrets do not. Branch protection does not; Origin has its own rules, but you rebuild them.
does cursor train on your code?
Cursor publishes a Privacy Mode which states: “When enabled, we will not train on your data”, available to anyone, free or Pro. Its security page also publishes a subprocessor list, “re-reviewed annually”, and a SOC 2 Type II report on request. Reports that Cursor publishes no training policy and no subprocessor list are wrong. On data retention this card makes no claimcursor.com/legal/privacy answered HTTP 200 and was not opened this sweep.
how many outages does github actually have?
GitHub’s own status API returns 50 incidents between 2026-06-17 and 2026-08-20 — 9 critical, 11 major, 29 minor. Cursor’s, same endpoint and method, returns 50 over 2026-06-22 to 2026-08-19 — 3 critical, 10 major, 37 minor. Both are primary and both cap at 50. The widely-quoted “257 outages in a year” is verifiable and verified: LeadDev (2026-05-07), from IncidentHub’s tracked dataset — 257 incidents May 2025–April 2026, 48 major, 112 hr 18 min of major-outage downtime, and on the same index GitLab 132, Bitbucket 27. An earlier draft of this card said it could not be checked; the status API was simply the wrong instrument, since its records begin four months after that window ends.
what did developers actually recommend instead of github?
In Ask HN: Alternatives to GitHub (2026-08-17, 639 points, 421 comments), the names that came up were Forgejo (60 comments), GitLab (50), Gitea (49) and Codeberg (43). Cursor was named in 10. The counts are comments containing each term; 8 of the 10 genuinely name Cursor Origin and two mean the editor, so 10 is a ceiling.
when was cursor origin announced?
2026-06-16, at Cursor’s first developer event, as “a git forge for the agentic era”, with a waitlist and an autumn target. The initial beta shipped on 2026-08-17 — the day GitHub had a critical outage. The coincidence is in the beta date, not in the product’s existence; Cursor’s own staff said they had meant to ship earlier.

Stuck on a different switch?

If the card doesn't exist yet, request it — free, like everything here. Full sweep, weighted verdict, and one email the moment it's published.

Request a card