
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@opencode-ai/sdk
Advanced tools
Official SDK for calling Anthropic models. It is focused on model APIs such as messages and streaming; OpenCode's SDK instead exposes a coding-agent server and its sessions and events.
Official OpenAI API client for model and platform services. It is a closer fit for applications that directly call OpenAI APIs, while OpenCode's SDK is oriented around controlling an OpenCode coding-agent instance.
Google's SDK for Gemini and related generative AI APIs. It provides model-oriented generation features rather than OpenCode's server, project, and coding-session workflows.
Vercel AI SDK for building model-powered applications, including text generation, streaming, and tool use across providers. It offers broader provider abstractions; OpenCode's SDK is specifically for interacting with OpenCode.
FAQs
Unknown package
The npm package @opencode-ai/sdk receives a total of 0 weekly downloads. As such, @opencode-ai/sdk popularity was classified as not popular.
We found that @opencode-ai/sdk demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.