Item detail
github.com

openai/codex-security

RepoRadar surfaced openai/codex-security — an AI project — into the Developer Tools section, where it sits at Silver tier with a 'worth watch' verdict. Its strongest signal is momentum, scored 9.2 out of 10.

Score8.6
Popularity100.0
Riskmedium
TierSilver
Score breakdown
Usefulness8.8
Novelty8.5
Momentum9.2
Maturity8.7
Open-source/build8.4
Evidence8.0
Workflow potential9.0
Setup ease5.5

Popularity is tracked separately. Support, ads, sponsorships, and tips never affect these signals.

Why it matters

The official repository provides runnable code, an npm package, container guidance, and documentation for a concrete developer-security workflow rather than only a hosted product announcement.

Who should use it

Application-security teams and developers who can review scan evidence and proposed fixes before changing production code.

Who should skip it

Skip openai/codex-security if you cannot isolate its execution environment or audit what data it touches before connecting anything sensitive.

About this signal

openai/codex-security is tracked by RepoRadar as an AI project in the Developer Tools section. It was first seen on 2026-07-31 and last updated on 2026-07-31. The current verdict is 'worth watch' with a Silver tier and Moderate setup difficulty. openai/codex-security leads on momentum (9.2) and workflow potential (9.0); its lowest signal is setup ease (5.5), so factor that in before investing setup time. This page summarizes the evidence RepoRadar captured from https://github.com/openai/codex-security. The score, tier, risk label, and verdict on this page are never influenced by sponsorship, ads, or tips — they reflect only the usefulness, popularity, novelty, momentum, maturity, and evidence signals described in the RepoRadar methodology.

How this item is evaluated

RepoRadar assigned openai/codex-security a composite score of 8.6 out of 10, placing it in the Silver tier. This score combines weighted sub-signals: usefulness (35%), novelty (18%), momentum (14%), maturity (10%), open-source/build quality (7%), evidence quality (6%), workflow potential (6%), and setup ease (4%). Popularity is tracked separately at 100.0 and never affects the composite score or tier. The risk label of 'medium' reflects inherent user-impacting hazards, not generic novelty. Items with no risk flag may still require normal code review before production use.

Putting this into practice? Read How to evaluate an AI tool before you adopt it for the checklist behind this score.

Risk explanation

local_file_access; code_execution; credential_access; external_system_modification.

Evidence links
Closest alternatives / related signals
security code-scanning cli sdk developer-tools top-50-signal-review
Verification record

What RepoRadar actually verified

Discovered

Automated discovery and source capture. Last checked 2026-08-02T22:32:06Z.

No editorial or hands-on review is claimed. This record remains at Discovered.

Verification sources

Longitudinal intelligence

How this decision record is moving

Raw history JSON →

2 dated snapshots retained from 2026-08-01 through 2026-08-02; see the snapshot index for explicit coverage gaps. Stars, version, release, pricing, integration, risk, maintenance, verdict, score, and momentum fields remain explicit even when a source has not reported them. Repository momentum is a normalized 0–10 RepoRadar signal; GitHub stars appear only where the popularity monitor retained exact timestamped observations.

RepoRadar score8.6 current · +0.0 net
Repository momentum9.0 current · -0.2 net
GitHub stars (observed)Trend begins after a second recorded point.
GitHub stars8,053 exact observation
Versionnpm-v0.1.5
Last release2026-07-31T16:08:45Z
Maintenanceactive
Current riskmedium
Current verdictworth watch
Pricing baselineNo structured commercial pricing baseline
Pricing checkedNot applicable or not recorded
Pricing freshnessNo dated commercial pricing review
Integrations baselineOpenAI

Recent dated points

DateScoreMomentumStarsRiskVerdictMaintenance
2026-08-028.69.08,053mediumworth watchactive
2026-08-018.69.2Not recordedmediumworth watchsource activity not yet measured

Why the record changed

maintenance changed

Maintenance changed: source_activity_not_yet_measured → active.

version changed

Version changed: not recorded → npm-v0.1.5.

new entity

Newly added to RepoRadar's decision catalog.