@openai/agents-realtime

The OpenAI Agents SDK is a lightweight yet powerful framework for building multi-agent workflows. This package contains the logic for building realtime voice agents on the server or in the browser.

Latest 0.20.0

NPM

88%

Total Score

healthy

Frequent releases, active contributors, and provenance make this a healthy release despite minor workflow and repository-linkage concerns.

Are you affected? Scan for Free

Health Score Breakdown

Maintainers

Seventeen of 18 publishing accounts use the organization domain, which is appropriate for an organization-backed project. One account, aibrahim-openai (gmail.com), is an account-hygiene caution, not evidence of limited maintenance capacity.

Repo package mention

The repository name does not match the package name and its README does not mention the package, which creates a modest package-to-repository traceability concern. The shared organization and extensive monorepo-style repository tree partly explain why a subpackage may not be named directly.

Version stability

Version 0.20.0 is not a stable major release, so API compatibility may still evolve, but it is not a prerelease and recent releases show no prerelease share.

Workflow audit

All eight workflows were analyzed with no untrusted checkout or script-injection findings, all 33 action references are pinned, and permissions are scoped read-only or at job level. The audit still reports high-confidence template injection and trusted-publishing findings, so workflow hygiene merits caution even though no dangerous sink was identified.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-996474 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @openai/agents-realtime is vulnerable to Improper Authorization in versions 0.1.0 - 0.10.0.	0.1.0 - 0.10.0	Medium