Context-as-image compression proxy for LLMs: renders bulky context (system prompt, tool docs, history) as dense PNG pages with exact per-provider billing math (Anthropic/OpenAI/Gemini). Node and Cloud
Omniroute
diegosouza.pw · App
Unified AI router with 160+ providers, RTK+Caveman compression, auto fallback, MCP/A2A, desktop, PWA, and OpenAI-compatible APIs.
Not claimed by its maker. Is this yours? Prove it and answer the findings
The registry now serves 3.8.51. Everything measured on this page describes 3.8.50.
Findings, provenance and the install command are records of the scanned version, not the one npm would give you today. Treat them as history until this listing is rescanned. Registry checked 2026-10-01.
1 published advisory against this version, the worst rated critical.
Read from the npm advisory database on the nightly check, not from our own scan. An advisory describes a defect somebody found and reported after publication, so it can appear on a listing that passed every check here. Checked 2026-10-01.
Read the advisoriesWhat else was checked
Publisher and name
Nothing found across 4 checks run. Checked 2026-10-01.
Maintenance
MaintainedA release on 28 Aug 2026 (3.8.50), 26 days before this check on 23 Sep 2026. Anything later would only be more recent.
Read from the npm registry, read by the weekly version refresh.
Release activity only: it says nothing about quality or safety, and a finished small package can be fine without releases. How it is measured
What this does not cover
- Everything. Treat it as you would software from anywhere else.
Receipt history: every signed receipt for every version of this listing, and what changed between them.
What it does
Unified AI router with 160+ providers, RTK+Caveman compression, auto fallback, MCP/A2A, desktop, PWA, and OpenAI-compatible APIs.
Compare with
Compare all 4How far this has been checked
Publisher verified
- What it establishes
- Whoever published it proved they control the source it comes from.
- What it does not
- Anything about the software. A verified publisher can ship bad code, and this rung says only that the name is real.
- Authentication
- Runs locally. No hosted endpoint is listed for this package. You run it on your own machine, so there is no endpoint of ours to authenticate against.
Not read, deliberately. The published package is 116 MB, above the size this scanner reads. Raising the limit would mean reporting a clean scan of a few source files sitting beside a great deal of compiled code nobody here has looked at, which is a worse answer than this one.
How the rungs workAdding it
Run it with:
npx -y -p omniroute@3.8.50 omniroutePinned to 3.8.50, which is the version the findings above were found in. Drop the version to take whatever is newest, and the report on this page stops describing what you installed.
234,372 installs last month · build provenance signed · runs a script on install · checked 2026-10-01
Where this came from
- Registry
- npm
- Package
- omniroute
- Version read
- 3.8.50
- Resolved
- 2026-09-23
Built from source, attested
npm publishes a signed statement that this exact package was built from the repository below, at this commit. It is verifiable without taking our word for it.
- Repository
- github.com/diegosouzapw/omniroute
- Commit
- dea6bb8b6b64
- Built by
- github.com/actions/runner/github-hosted
- Registry publish attestation
- signed by npm · 2026-09-23
- Checked
- 2026-09-23
The badge, if this is your listing
It renders the current rung (publisher verified) and links back here, where what that does and does not establish is one click away. It updates itself as the evidence deepens.
[](https://ooruby.com/market/omniroute)About this listing
- Kind
- App
- Category
- Infrastructure
- Pricing
- Free
- Sandbox
- No
- Hosted
- No
- Updated
- 2026-08-28
More from diegosouza.pw
See the storefrontSimilar apps
All appsVerification records what our published tests found on a specific version at a specific date. It is not a warranty, and it does not certify that software is free of defects.