npm @openai/codex-sdk @0.139.0
score
0.7
high
flagged
2026-06-13 12:34
Signals fired
| signal | weight | rationale |
|---|---|---|
| topology | ||
| dist_tag_anomaly | 0.5 | dist-tags.latest=0.139.0 but max published is 0.140.0-alpha.2 |
| shared_repo_different_publisher | 0.9 | repo 'git+https://github.com/openai/codex.git' also claimed by 8 package(s) under different publishers: ['npm/@codexed/codex-win32-x64', 'npm/@zzy_hacker/vcode', 'npm/@openai/codex-responses-api-proxy'] ... |
Prior profile (what it deviated from)
{
"had_install_script": false,
"maintainers": [
"dylan-hurd-openai",
"moustafa-openai",
"tylersmith-openai",
"jbeckwith-oai",
"atty-openai",
"tibo-openai",
"dkundel-openai",
"mbolin-openai",
"fouad-openai",
"easong-openai",
"aibrahim-openai",
"apcha-oai",
"seratch-openai"
],
"versions": 653
}
Evidence (package doc at flag time)
{
"dependencies_count": 1,
"dist": {
"integrity": "sha512-r4lDckaVx4mVZy1v/7ykEhkeWjVfM/4oGJfhG0AP4+zN3Sa+jcf5hdY4EHfJasofBcp0tIF/7JCKHpv534R+tw==",
"tarball": "https://registry.npmjs.org/@openai/codex-sdk/-/codex-sdk-0.139.0.tgz",
"unpackedSize": 76741
},
"dist-tags": {
"alpha": "0.140.0-alpha.18",
"latest": "0.139.0"
},
"latest_version": "0.139.0",
"maintainers": [
{
"email": "dylan.hurd@openai.com",
"name": "dylan-hurd-openai"
},
{
"email": "moustafa@openai.com",
"name": "moustafa-openai"
},
{
"email": "tylersmith@openai.com",
"name": "tylersmith-openai"
},
{
"email": "jbeckwith@openai.com",
"name": "jbeckwith-oai"
},
{
"email": "atty@openai.com",
"name": "atty-openai"
},
{
"email": "tibo@openai.com",
"name": "tibo-openai"
},
{
"email": "dkundel@openai.com",
"name": "dkundel-openai"
},
{
"email": "mbolin@openai.com",
"name": "mbolin-openai"
},
{
"email": "fouad@openai.com",
"name": "fouad-openai"
},
{
"email": "easong@openai.com",
"name": "easong-openai"
},
{
"email": "ahmedibrhm32@gmail.com",
"name": "aibrahim-openai"
},
{
"email": "apcha@openai.com",
"name": "apcha-oai"
},
{
"email": "seratch@openai.com",
"name": "seratch-openai"
}
],
"num_versions": 654,
"repository": {
"directory": "sdk/typescript",
"type": "git",
"url": "git+https://github.com/openai/codex.git"
},
"scripts": {
"build": "tsup",
"build:watch": "tsup --watch",
"clean": "rm -rf dist",
"coverage": "jest --coverage",
"format": "prettier --check .",
"format:fix": "prettier --write .",
"lint": "pnpm eslint \"src/**/*.ts\" \"tests/**/*.ts\"",
"lint:fix": "pnpm eslint --fix \"src/**/*.ts\" \"tests/**/*.ts\"",
"test": "jest",
"test:watch": "jest --watch"
},
"signal_details": {
"dist_tag_anomaly": "dist-tags.latest=0.139.0 but max published is 0.140.0-alpha.2",
"shared_repo_different_publisher": "repo 'git+https://github.com/openai/codex.git' also claimed by 8 package(s) under different publishers: ['npm/@codexed/codex-win32-x64', 'npm/@zzy_hacker/vcode', 'npm/@openai/codex-responses-api-proxy'] ..."
},
"time": {
"created": "2025-10-01T15:25:12.061Z",
"modified": "2026-06-13T17:34:12.195Z"
}
}