@openai/codex
Advanced tools
@openai/codex - npm Package Compare versions
New alerts
Native code
Supply chain riskContains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.
Major refactor
Supply chain riskPackage has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.
Copyleft License
LicenseCopyleft license information was found.
License exception
LicenseContains an SPDX license exception.
Mixed license
LicensePackage contains multiple licenses.
Non-permissive License
LicenseA license not known to be considered permissive was found.
Fixed alerts
Shell access
Supply chain riskThis module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.
Debug access
Supply chain riskUses debug, reflection and dynamic code execution features.
Environment variable access
Supply chain riskPackage accesses environment variables, which may be a sign of credential stuffing or data theft.
Found 3 instances
Filesystem access
Supply chain riskAccesses the file system, and could potentially read sensitive data.
Improved metrics
- Total package byte prevSize
317538095
2390460.08%- Dependency count
0
-100%- Number of package files
44
1366.67%- Lines of code
524
97.74%- Number of low supply chain risk alerts
0
-100%Worsened metrics
- Number of low license alerts
4
Infinity%- License quality
70
-30%- Number of medium supply chain risk alerts
31
3000%- Is type module
No
NaN