Rank#1017
- Created
- last year
- Last commit
- 5 days ago
- Latest release
- v1.18.34last week
Security Findings
3pull_request_target with secrets
MaliciousLineage[.github/workflows/pr-management.yml] pull_request_target with secrets
Unpinned dependencies
SuspiciousLineage7 unpinned: @opencode-ai/plugin, @opencode-ai/script, @opencode-ai/sdk, typescript, @tsconfig/bun
Workflow makes outbound network call
SuspiciousLineage[.github/workflows/docs-locale-sync.yml] curl -fsSL https://opencode.ai/install