@openai/codex - npm Package Compare versions

Comparing version 0.131.0-alpha.9 to 0.131.0-alpha.21

bin/codex.js

@@ -5,3 +5,3 @@ #!/usr/bin/env node
 import { spawn } from "node:child_process";
-import { existsSync } from "fs";
+import { existsSync, realpathSync } from "fs";
 import { createRequire } from "node:module";
@@ -175,2 +175,3 @@ import path from "path";
 env[packageManagerEnvVar] = "1";
+env.CODEX_MANAGED_PACKAGE_ROOT = realpathSync(path.join(__dirname, ".."));
 
@@ -177,0 +178,0 @@ const child = spawn(binaryPath, process.argv.slice(2), {

package.json

 {
   "name": "@openai/codex",
-  "version": "0.131.0-alpha.9",
+  "version": "0.131.0-alpha.21",
   "license": "Apache-2.0",
@@ -22,9 +22,9 @@ "bin": {
   "optionalDependencies": {
-    "@openai/codex-linux-x64": "npm:@openai/codex@0.131.0-alpha.9-linux-x64",
-    "@openai/codex-linux-arm64": "npm:@openai/codex@0.131.0-alpha.9-linux-arm64",
-    "@openai/codex-darwin-x64": "npm:@openai/codex@0.131.0-alpha.9-darwin-x64",
-    "@openai/codex-darwin-arm64": "npm:@openai/codex@0.131.0-alpha.9-darwin-arm64",
-    "@openai/codex-win32-x64": "npm:@openai/codex@0.131.0-alpha.9-win32-x64",
-    "@openai/codex-win32-arm64": "npm:@openai/codex@0.131.0-alpha.9-win32-arm64"
+    "@openai/codex-linux-x64": "npm:@openai/codex@0.131.0-alpha.21-linux-x64",
+    "@openai/codex-linux-arm64": "npm:@openai/codex@0.131.0-alpha.21-linux-arm64",
+    "@openai/codex-darwin-x64": "npm:@openai/codex@0.131.0-alpha.21-darwin-x64",
+    "@openai/codex-darwin-arm64": "npm:@openai/codex@0.131.0-alpha.21-darwin-arm64",
+    "@openai/codex-win32-x64": "npm:@openai/codex@0.131.0-alpha.21-win32-x64",
+    "@openai/codex-win32-arm64": "npm:@openai/codex@0.131.0-alpha.21-win32-arm64"
   }
 }

New alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Fixed alerts

Environment variable access

Supply chain risk

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

Found 4 instances in 1 package

Filesystem access

Supply chain risk

Accesses the file system, and could potentially read sensitive data.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

13007

0.74%

Lines of code

205

0.49%

No dependency changes