diegosouza.pw · App
Unified AI router with 160+ providers, RTK+Caveman compression, auto fallback, MCP/A2A, desktop, PWA, and OpenAI-compatible APIs.
Not claimed by its maker. Is this yours? Prove it and answer the findings
The registry now serves 3.8.51. Everything measured on this page describes 3.8.50.
Findings, provenance and the install command are records of the scanned version, not the one npm would give you today. Treat them as history until this listing is rescanned. Registry checked 2026-10-07.
1 published advisory against this version, the worst rated critical.
Read from the npm advisory database on the nightly check, not from our own scan. An advisory describes a defect somebody found and reported after publication, so it can appear on a listing that passed every check here. Checked 2026-10-07.
Read the advisoriesReceipt history: every signed receipt for every version of this listing, and what changed between them.
Unified AI router with 160+ providers, RTK+Caveman compression, auto fallback, MCP/A2A, desktop, PWA, and OpenAI-compatible APIs.
Publisher verified
Not read, deliberately. The published package is 116 MB, above the size this scanner reads. Raising the limit would mean reporting a clean scan of a few source files sitting beside a great deal of compiled code nobody here has looked at, which is a worse answer than this one.
How the rungs workRun it with:
npx -y -p omniroute@3.8.50 omniroutePinned to 3.8.50, which is the version the findings above were found in. Drop the version to take whatever is newest, and the report on this page stops describing what you installed.
239,539 installs last month (via ecosyste.ms) · build provenance signed · runs a script on install · checked 2026-10-07
Built from source, attested
npm publishes a signed statement that this exact package was built from the repository below, at this commit. It is verifiable without taking our word for it.
It renders the current rung (publisher verified) and links back here, where what that does and does not establish is one click away. It updates itself as the evidence deepens.
[](https://ooruby.com/market/omniroute)Verification records what our published tests found on a specific version at a specific date. It is not a warranty, and it does not certify that software is free of defects.
Context-as-image compression proxy for LLMs: renders bulky context (system prompt, tool docs, history) as dense PNG pages with exact per-provider billing math (Anthropic/OpenAI/Gemini). Node and Cloud
Use Claude, Anthropic's AI assistant, right from your terminal. Claude can understand your codebase, edit files, run terminal commands, and handle entire workflows for you.
Maintenance
MaintainedA release on 28 Aug 2026 (3.8.50), 26 days before this check on 23 Sep 2026. Anything later would only be more recent.
Read from the npm registry, read by the weekly version refresh.
Release activity only: it says nothing about quality or safety, and a finished small package can be fine without releases. How it is measured