3 findingsStatic scanned
Codex CLI is a coding agent from OpenAI that runs locally on your computer.
71.3M installs/moApache-2.0
Imcodes
imcodes · Agent
A chat interface for AI coding agents — control Claude Code, Codex, Gemini CLI, OpenCode from browser and mobile
Not claimed by its maker. Is this yours? Prove it and answer the findings
What else was checked
Publisher and name
Nothing found across 5 checks run. Checked 2026-10-02.
Maintenance
MaintainedLast release 1 Oct 2026 (2026.10.5323-dev.5756), 0 days before this check on 2 Oct 2026.
Read from the npm registry's publish history, read by the nightly publisher check.
Release activity only: it says nothing about quality or safety, and a finished small package can be fine without releases. How it is measured
What this does not cover
- Everything. Treat it as you would software from anywhere else.
Receipt history: every signed receipt for every version of this listing, and what changed between them.
What it does
A chat interface for AI coding agents — control Claude Code, Codex, Gemini CLI, OpenCode from browser and mobile
Compare with
Compare all 4How far this has been checked
Publisher verified
- What it establishes
- Whoever published it proved they control the source it comes from.
- What it does not
- Anything about the software. A verified publisher can ship bad code, and this rung says only that the name is real.
- Authentication
- Runs locally. No hosted endpoint is listed for this package. You run it on your own machine, so there is no endpoint of ours to authenticate against.
Not read, deliberately. The published package is 78 MB, above the size this scanner reads. Raising the limit would mean reporting a clean scan of a few source files sitting beside a great deal of compiled code nobody here has looked at, which is a worse answer than this one.
How the rungs workAdding it
Run it with:
npx -y -p imcodes@2026.8.3638 imcodesPinned to 2026.8.3638, which is the version the findings above were found in. Drop the version to take whatever is newest, and the report on this page stops describing what you installed.
209,895 installs last month (via ecosyste.ms) · build provenance signed · runs a script on install · no published advisories · version current · checked 2026-10-05
Where this came from
- Registry
- npm
- Package
- imcodes
- Version read
- 2026.8.3638
- Resolved
- 2026-08-23
Built from source, attested
npm publishes a signed statement that this exact package was built from the repository below, at this commit. It is verifiable without taking our word for it.
- Repository
- github.com/im4codes/imcodes
- Commit
- 023f7c358570
- Built by
- github.com/actions/runner/github-hosted
- Registry publish attestation
- signed by npm · 2026-09-01
- Checked
- 2026-08-31
The badge, if this is your listing
It renders the current rung (publisher verified) and links back here, where what that does and does not establish is one click away. It updates itself as the evidence deepens.
[](https://ooruby.com/market/imcodes)About this listing
- Kind
- Agent
- Category
- Developer tools
- Pricing
- Free
- Sandbox
- No
- Hosted
- No
- Updated
- 2026-08-23
Similar agents
All agentsVerification records what our published tests found on a specific version at a specific date. It is not a warranty, and it does not certify that software is free of defects.