# [openai/codex-security](https://github.com/openai/codex-security) OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security 13.6k stars · 1.1k forks · TypeScript Caution One person wrote most of the recent commits. ## Why - One person wrote 76% of human commits in the last year, so the project depends on them continuing. ([source 1](https://github.com/openai/codex-security/commits), [source 2](https://github.com/openai/codex-security/graphs/contributors)) ### What would change this - A second person takes a substantial share of commits. - Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.; Authors in the last 90 days are counted from the sampled commits only.) ## Maintenance Partial Active **Human commits, 30 days** 851 **Human commits, 90 days** 1.6k **Human commits, 365 days** 1.9k **Bot share of commits, 365 days** 9% **Last commit** Nov 14, 2026 (1 day ago) **Last human commit** Nov 14, 2026 (1 day ago) **Authors, 90 days** 48 **Last release** Nov 12, 2026 (3 days ago) **Median PR merge time** 5 hours Responsiveness: of 29 recent issues, 100% got a maintainer reply. Median first response: 7 days. - Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share. - Authors in the last 90 days are counted from the sampled commits only. Sources: [Commits](https://github.com/openai/codex-security/commits), [Releases](https://github.com/openai/codex-security/releases), [Merged pull requests](https://github.com/openai/codex-security/pulls?q=is%3Apr+is%3Amerged), [Issues](https://github.com/openai/codex-security/issues?q=is%3Aissue) ## People Complete **Owner** Organization **Commits sampled** 457 since Nov 15, 2025 **Authors for half of commits** 1 **Authors for 80% of commits** 3 **Contributors** 90 ### Top committers - mldangelo-oai: 76% of commits - Shizoqua: 3% of commits - ianw-oai: 2% of commits - dipeshbabu: 2% of commits - LittleYier: 2% of commits - Shares come from the newest sampled commits, since the commit sample is capped. Sources: [Commits](https://github.com/openai/codex-security/commits), [Contributors](https://github.com/openai/codex-security/graphs/contributors) ## Stars Complete Not enough data, confidence medium Bars show stars gained each week. Red bars overlap a burst. ### Bursts - **Nov 11, 2026 to Nov 14, 2026**: about 2.1k more stars than usual, peak 736 in one day, a shape we can't classify. No outside explanation found, so this burst is unexplained. Anyone can buy stars for any repo; bursts alone don't prove the owner did. - Not enough star history yet to judge the star count. Sources: [How star history is analyzed](https://reporadar.ai/methodology#stars) ## Risk Complete ### Flags No risk flags. ### License **Now** Apache-2.0 (OSI-approved) **A year ago** Not known ### Packages No published packages found. Sources: [GitHub: openai/codex-security](https://github.com/openai/codex-security) ## Compare Weighing openai/codex-security against an alternative? See both side by side. ## Badge ![RepoRadar: Caution](data:image/svg+xml,%3Csvg%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%20width%3D%22112%22%20height%3D%2220%22%20role%3D%22img%22%20aria-label%3D%22reporadar%3A%20caution%22%3E%3Ctitle%3Ereporadar%3A%20caution%3C%2Ftitle%3E%3CclipPath%20id%3D%22r%22%3E%3Crect%20width%3D%22112%22%20height%3D%2220%22%20rx%3D%223%22%2F%3E%3C%2FclipPath%3E%3Cg%20clip-path%3D%22url(%23r)%22%3E%3Crect%20width%3D%2263%22%20height%3D%2220%22%20fill%3D%22%23555%22%2F%3E%3Crect%20x%3D%2263%22%20width%3D%2249%22%20height%3D%2220%22%20fill%3D%22%23dfa000%22%2F%3E%3C%2Fg%3E%3Cg%20fill%3D%22%23fff%22%20text-anchor%3D%22middle%22%20font-family%3D%22Verdana%2CGeneva%2CDejaVu%20Sans%2Csans-serif%22%20font-size%3D%2211%22%3E%3Ctext%20x%3D%2232%22%20y%3D%2214%22%3Ereporadar%3C%2Ftext%3E%3Ctext%20x%3D%2288%22%20y%3D%2214%22%3Ecaution%3C%2Ftext%3E%3C%2Fg%3E%3C%2Fsvg%3E) Add this to a README to show the current verdict: ``` [![RepoRadar](https://reporadar.ai/openai/codex-security/badge.svg)](https://reporadar.ai/openai/codex-security) ``` ## Follow Get told when this verdict changes. Add the feed to any feed reader: you get one entry per change, not one per refresh. ``` https://reporadar.ai/openai/codex-security/feed.xml ``` [Open the feed](https://reporadar.ai/openai/codex-security/feed.xml) ## More repos rated Caution [See all](https://reporadar.ai/-/reports/caution) - [doocs/md](https://reporadar.ai/doocs/md) 13.5k stars - [0x4m4/hexstrike-ai](https://reporadar.ai/0x4m4/hexstrike-ai) 13.6k stars - [Lightning-AI/litgpt](https://reporadar.ai/Lightning-AI/litgpt) 13.7k stars - [JoeanAmier/XHS-Downloader](https://reporadar.ai/JoeanAmier/XHS-Downloader) 13.3k stars - [halfrost/Halfrost-Field](https://reporadar.ai/halfrost/Halfrost-Field) 13.3k stars - [mnfst/awesome-free-llm-apis](https://reporadar.ai/mnfst/awesome-free-llm-apis) 13.2k stars ## Earlier verdicts - Nov 15, 2026: Caution Computed 1 hour ago · method 2026.10.2 Source: https://reporadar.ai/openai/codex-security