
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
Local-first multi-harness control plane for Claude Code, Codex, Cursor, and OpenCode with quota-aware rotation across multiple Claude Code and Codex subscriptions.
Local-first control plane for Claude Code, Codex, Cursor, and OpenCode. It keeps one Claudexor coding thread moving across harnesses and can track quota and rotate across multiple user-owned Claude Code and Codex subscriptions.
Quota telemetry and automatic subscription rotation apply to Claude Code and Codex. Cursor and OpenCode participate in the multi-harness pool. Claudexor does not migrate native vendor sessions between credential profiles.
npm install -g claudexor
claudexor doctor
claudexor ask "map this repository"
claudexor agent "implement the approved plan" --harness codex
claudexor best-of "review this patch" --harness codex,claude --n 2
claudexor mcp serve
This package is the bin wrapper over
@claudexor/cli.
FAQs
Local-first multi-harness control plane for Claude Code, Codex, Cursor, and OpenCode with quota-aware rotation across multiple Claude Code and Codex subscriptions.
The npm package claudexor receives a total of 613 weekly downloads. As such, claudexor popularity was classified as not popular.
We found that claudexor demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.