codex-security

Read the source on GitHub Project homepage

What it does

An editorial selection.

OpenAI's CLI and TypeScript SDK for finding, validating and fixing vulnerabilities, including parallel deep scans and patch generation.

Why it is listed

Runs inside Codex, from the terminal or in automation. Validates candidate findings to cut false positives.

GitHub describes it as: OpenAI's Codex Security CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities. npm: https://www.npmjs.com/package/@openai/codex-security

Counts were observed on 27/10/2026, 23:15:40 UTC. Observations older than 36 hours are excluded from current movement rankings.

Repository at a glance

Stars: 11,227
Forks: 891
Open issues: 26
Merged PRs: 1,492
Commits, last 30 days: 872
Stars, 7 days: unavailable
Stars, 30 days: unavailable

Counts observed on 27/10/2026, 23:15:40 UTC. Growth uses complete dated windows; see Methodology.

History

History: 2 observations, 2026-10-27 to 2026-10-28. Dots are observations; lines connect consecutive daily observations only.

Project details

Language: not reported
Licence: Apache-2.0
Created: 13 Jul 2026
Last push: 27 Oct 2026
Latest release: npm-v0.7.0 · 26 Oct 2026
Category: Security
Topics: ai-security application-security cli code-scanning codex codex-security cybersecurity devsecops nodejs npm
Observed: 2026-10-27 23:15:40 UTC

Explore and get started

Use the project's own documentation for supported platforms, dependencies and installation steps. The README and release notes are maintained by openai.

Read the README and setup instructionsFeatures, prerequisites, examples and documentation links.
Browse releases and changelogsPublished versions and the changes made between releases.
Check licence and usage termsApache-2.0 is the licence reported by GitHub; read the repository terms before use.
Read pull requestsProposed changes and development discussions.
Browse reported issuesKnown problems, feature requests and maintainer responses.

Development context

These are observations of work in the repository. They do not establish quality, security or support commitments.

Total commits on default branch: 1,527
Open pull requests: 153
Closed issues, lifetime: 150
Median time to close an issue: 5.1 days
Median time to merge a pull request: 0.2 days

Close and merge times use up to 20 most recently updated closed issues or merged pull requests. They omit unresolved work and are context, not a maintenance score. Sample limits.

Other projects in Security, ordered by shared topics and then name. These are discovery links, not equivalence claims.