
Security News
pnpm 11.5 Adds Support for Recognizing npm Staged Publishes
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.
microsoft-copilot-opencode-provider
Advanced tools
OpenCode plugin for Microsoft Copilot API - auto adds provider with Copilot models
OpenCode plugin for Microsoft Copilot API - auto-configures Copilot models.
✅ Plugin auto-injects the provider - No manual provider configuration needed!
The plugin automatically registers the Microsoft Copilot provider with all available models.
Before using this plugin, you need to run the mcopilot2api server locally:
git clone https://github.com/hung319/mcopilot2apinpm install.env file with your Copilot cookie:
PORT=3001 # You can change this to avoid port conflicts
API_KEY=your-secret-api-key
COPILOT_COOKIE="MUID=...; _U=...; ... (full cookie string)"
node index.jsThe plugin automatically detects the port where the mcopilot2api server is running. It will scan common ports (3000, 3001, 3002, 4000, 5000, 8080, 8000) and find the one where mcopilot2api is running. If you need to use a different port, simply start the mcopilot2api server on your preferred port and the plugin will discover it automatically.
The server must be running and accessible for the plugin to work.
npm install microsoft-copilot-opencode-provider
{
"plugin": ["microsoft-copilot-opencode-provider"]
}
Note: No manual provider configuration needed! The plugin automatically registers the Microsoft Copilot provider with all available models.
document.cookie to see all cookies_U=..., MUID=..., etc./connect
# Select: Other
# Enter: copilot
/models
# Select Copilot model
Plugin auto-configures these models:
| Model | Description |
|---|---|
| copilot | General Copilot model |
| copilot-chat | Chat-focused model |
| copilot-smart | Smart responses with reasoning |
| copilot-reasoning | Enhanced reasoning capabilities |
| copilot-study | Focused on research and study |
| copilot-search | Optimized for search queries |
MIT
FAQs
OpenCode plugin for Microsoft Copilot API - auto adds provider with Copilot models
We found that microsoft-copilot-opencode-provider demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.

Security News
Federal audit finds NIST lacked a plan to clear the NVD backlog, wasted funds on duplicate work, and delayed use of CISA data.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.