@openai/codex-sdk

TypeScript SDK for Codex APIs.

Latest 0.163.0

NPM

82%

Total Score

healthy

Very active and well-supported release, but repository identity and workflow hygiene need attention.

Health Score Breakdown

Maintainers

Seventeen of 18 publishing accounts use the organization's openai.com domain, consistent with the organization-backed repository. One consumer-domain account, aibrahim-openai (gmail.com), is a minor account-hygiene concern rather than evidence of limited maintenance capacity.

Repo package mention

The repository name does not match the package name and its README does not mention @openai/codex-sdk, so the package's exact ownership and source relationship are less transparent even though it may be a deliberate subpackage of the Codex repository.

Version stability

Version 0.163.0 is not a prerelease, but 80% of recent releases were prereleases, indicating a fast-moving project and some API-change risk for dependents.

Workflow audit

All 28 workflows were analyzed with no untrusted checkouts or script injection and all 229 action references were pinned. However, high-confidence secrets-inherit findings and an archived action need cleanup; low-confidence cache-poisoning findings are hygiene concerns, while broad top-level write permissions affect only two workflows.