RepoRadaropenai/codex-security
OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security
13.6k stars · 1.1k forks · TypeScript
Caution
One person wrote most of the recent commits.
Why
- One person wrote 76% of human commits in the last year, so the project depends on them continuing. (source 1, source 2)
What would change this
- A second person takes a substantial share of commits.
- Partly checked: maintenance (Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.; Authors in the last 90 days are counted from the sampled commits only.)
Maintenance
PartialActive
- Human commits, 30 days
- 851
- Human commits, 90 days
- 1.6k
- Human commits, 365 days
- 1.9k
- Bot share of commits, 365 days
- 9%
- Last commit
- Nov 14, 2026 (1 day ago)
- Last human commit
- Nov 14, 2026 (1 day ago)
- Authors, 90 days
- 48
- Last release
- Nov 12, 2026 (3 days ago)
- Median PR merge time
- 5 hours
Responsiveness: of 29 recent issues, 100% got a maintainer reply. Median first response: 7 days.
- Commit counts are estimated: the commit sample stops before the window start, so GitHub's totals were scaled by the sampled bot share.
- Authors in the last 90 days are counted from the sampled commits only.
Sources: Commits, Releases, Merged pull requests, Issues
People
Complete- Owner
- Organization
- Commits sampled
- 457 since Nov 15, 2025
- Authors for half of commits
- 1
- Authors for 80% of commits
- 3
- Contributors
- 90
Top committers
- mldangelo-oai: 76% of commits
- Shizoqua: 3% of commits
- ianw-oai: 2% of commits
- dipeshbabu: 2% of commits
- LittleYier: 2% of commits
- Shares come from the newest sampled commits, since the commit sample is capped.
Sources: Commits, Contributors
Stars
CompleteNot enough data, confidence medium
Bursts
- Nov 11, 2026 to Nov 14, 2026: about 2.1k more stars than usual, peak 736 in one day, a shape we can't classify. No outside explanation found, so this burst is unexplained.
Anyone can buy stars for any repo; bursts alone don't prove the owner did.
- Not enough star history yet to judge the star count.
Sources: How star history is analyzed
Risk
CompleteFlags
No risk flags.
License
- Now
- Apache-2.0 (OSI-approved)
- A year ago
- Not known
Packages
No published packages found.
Sources: GitHub: openai/codex-security
Compare
Weighing openai/codex-security against an alternative? See both side by side.
Badge
%22%3E%3Crect%20width%3D%2263%22%20height%3D%2220%22%20fill%3D%22%23555%22%2F%3E%3Crect%20x%3D%2263%22%20width%3D%2249%22%20height%3D%2220%22%20fill%3D%22%23dfa000%22%2F%3E%3C%2Fg%3E%3Cg%20fill%3D%22%23fff%22%20text-anchor%3D%22middle%22%20font-family%3D%22Verdana%2CGeneva%2CDejaVu%20Sans%2Csans-serif%22%20font-size%3D%2211%22%3E%3Ctext%20x%3D%2232%22%20y%3D%2214%22%3Ereporadar%3C%2Ftext%3E%3Ctext%20x%3D%2288%22%20y%3D%2214%22%3Ecaution%3C%2Ftext%3E%3C%2Fg%3E%3C%2Fsvg%3E){kind=small}
Add this to a README to show the current verdict:
[](https://reporadar.ai/openai/codex-security)Follow
Get told when this verdict changes. Add the feed to any feed reader: you get one entry per change, not one per refresh.
https://reporadar.ai/openai/codex-security/feed.xmlMore repos rated Caution
- doocs/
md 13.5k stars - 0x4m4/
hexstrike-ai 13.6k stars - Lightning-AI/
litgpt 13.7k stars - JoeanAmier/
XHS-Downloader 13.3k stars - halfrost/
Halfrost-Field 13.3k stars - FareedKhan-dev/
train-llm-from-scratch 13.2k stars
Earlier verdicts
- Nov 15, 2026: Caution