
Security News
RubyGems Adds Cooldown Feature to Bundler for Newly Published Gems
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.
@khanglvm/llm-router
Advanced tools
LLM Router: single gateway endpoint for multi-provider LLMs with unified OpenAI+Anthropic format and seamless fallback
A unified LLM gateway that routes requests across multiple providers through a single endpoint. Supports both OpenAI and Anthropic-compatible formats. Manage everything via Web UI or CLI — optimized for AI agents.

npm i -g @khanglvm/llm-router@latest
llr # open Web UI
llr start # start the local gateway
llr ai-help # agent-oriented setup brief
yarn dev runs the console against a dedicated dev config/router port, highlights dev mode in terminal + UI, can clone the production config into the sandbox for quick iteration, and automatically reclaims stale dev listeners before the next session startsllr update keeps the fixed local router endpoint online, drains in-flight requests, and automatically retries through backend restart windowsllr config --operation=... so agents can configure everything programmaticallyOpen llr and use the Local Models tab to manage local inference sources alongside hosted providers.
llama.cpp runtime — detect or point at a local llama-server, attach GGUF files in place, or download public GGUF artifacts into the router-managed library under ~/.llm-router/local-modelsllama-server binaryFor v1, the managed download flow only searches public Hugging Face GGUF files and the fit guidance is tuned for Macs with unified memory.
llr start keeps a small supervisor bound to the fixed local router port and runs the real router backend behind it on an internal loopback port.
That means llr update can install a new package version and gracefully swap the backend without breaking active CLI or tool requests. Requests that arrive during the short backend handoff are deferred and retried automatically instead of failing immediately. The Web UI may reconnect during that window, but router-managed API traffic keeps the same public local endpoint.
yarn dev
Development mode uses the dedicated ~/.llm-router-dev.json config and its own local router port so it can run alongside a startup-managed or manually started production router. The terminal and Web UI both show a dev-mode indicator, the dev Web UI includes a one-click sync action to copy the current production config into the sandbox without changing the dev router binding, and each new yarn dev run automatically takes over any stale dev web-console/router listeners from a prior session.
Create stable route names across multiple providers with balancing and failover.

Route AMP-compatible requests through LLM Router with custom model mapping.

Route Codex CLI requests through the gateway with model override and thinking level.

Route Claude Code through the gateway with per-tier model bindings.

Claude Code can also select a shared Web Search provider or hosted search route from the router config. When Claude-compatible traffic uses native web-search or page-fetch tools, LLM Router can satisfy those calls through the selected shared web-search provider instead of relying on upstream-native web tooling.
Route Factory Droid through the gateway via a managed custom model entry with reasoning effort control.
LLM Router injects router-managed customModels entries for aliases and provider/model routes, then writes Factory defaults as custom:llm-* IDs so Droid selects the custom provider entry instead of a native built-in model with the same name.
Configure search providers for AMP and other router-managed tools.

AMP support is in beta. Features and API surface may change.
LLM Router can front AMP-compatible routes locally and proxy unresolved traffic upstream. Configure via the Web UI or CLI:
llr config --operation=set-amp-client-routing --enabled=true --amp-client-settings-scope=workspace
OAuth-backed subscription login is supported for ChatGPT.
Note: ChatGPT subscriptions are separate from the OpenAI API and intended for use within OpenAI's own apps. Using them here may violate OpenAI's terms of service.
FAQs
LLM Router: single gateway endpoint for multi-provider LLMs with unified OpenAI+Anthropic format and seamless fallback
We found that @khanglvm/llm-router demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.