registry / @codexapi/codexclaude / 2.0.14

@codexapi/codexclaude@2.0.14

CodexAPI.pro coding CLI launcher for ChatGPT-5.5, Opus 4.8, Sonnet 5, Fable 5, Deepseek v4 Budget, and Google Gemini Flash 3.5, powered by official Codex CLI 0.142.5.

Static Scan Results

scanned 1mo ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessEnvironmentVarsFilesystemNetworkShell

Supply chain

UrlStrings

ManifestNo manifest risk signals triggered.

scanned 1 file(s), 25.4 KB of source, external domains: api-chicago.codexapi.pro, codexapi.pro, registry.npmjs.org

Source & flagged code

2 flagged

bin/codexclaude.jsView file

Lines 1-22javascript

1#!/usr/bin/env node

3import { spawn } from "node:child_process";

4import { createRequire } from "node:module";

High

Child Process

Package source references child process execution.

bin/codexclaude.jsView on unpkg · L2

5import { existsSync, mkdirSync, readFileSync, writeFileSync, copyFileSync, chmodSync } from "node:fs";

6import { homedir } from "node:os";

7import path from "node:path";

8import readline from "node:readline/promises";

9import { stdin as input, stdout as output } from "node:process";

11const require = createRequire(import.meta.url);

13const APP_VERSION = "2.0.14";

14const CODEX_VERSION = "0.142.5";

15const DISPLAY_REASONING_EFFORT = "xhigh";

16const SERVER_REASONING_EFFORT = "high";

17const API_ORIGIN = (process.env.CODEXCLAUDE_API_ORIGIN || "https://codexapi.pro").replace(/\/+$/, "");

18const API_BASE_URL = `${API_ORIGIN}/v1`;

High

Same File Env Network Execution

A single source file combines environment access, network access, and code or shell execution; review context before blocking.

bin/codexclaude.jsView on unpkg · L2

19const CHICAGO_API_ORIGIN = "https://api-chicago.codexapi.pro";

20const CHICAGO_API_BASE_URL = `${CHICAGO_API_ORIGIN}/v1`;

21const VERSION_CHECK_PATH = "/api/v1/codexclaude/version";

22const NPM_PACKAGE_NAME = "@codexapi/codexclaude";

Source & flagged code

2 flagged · loading source

bin/codexclaude.jsView file

2L3: import { spawn } from "node:child_process"; L4: import { createRequire } from "node:module";

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code