New:Socket for Asana Is Now Available.Learn more →
@openai/codex
Advanced tools
@openai/codex - npm Package Compare versions
New alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Fixed alerts
Empty package
Supply chain riskPackage does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.
Native code
Supply chain riskContains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.
Improved metrics
- Lines of code
265
Infinity%- Number of medium supply chain risk alerts
1
-83.33%- Is type module
Yes
NaNWorsened metrics
- Total package byte prevSize
13206
-100%- Dependency count
6
Infinity%- Number of package files
3
-62.5%- Number of low supply chain risk alerts
5
Infinity%No dependency changes