Is OpenAI Codex CLI Still Maintained? Live GitHub Status
Codex CLI is OpenAI’s open-source coding agent that runs in your terminal.
Short answer: Yes, it is actively maintained. Health score 100/100. Checked 18 Oct 2026.
What the numbers say
OpenAI Codex CLI’s main branch received 3,988 commits in the last 91 days, against 1,096 in the same 91 days a year earlier (+264%). Activity is at least half of last year’s pace and no maintenance notice was found, so the index labels it active. It has 129,757 stars on GitHub.
OpenAI Codex CLI usage: downloads and installs
@openai/codexTrend: the monthly download count is stored once a day, starting 17 Oct 2026. A chart appears here after a week of readings.
Download and pull counts include automated installs from CI pipelines, containers and mirrors, so they show how widely the software is pulled, not how many people use it. Numbers from different registries are not comparable with each other. Sources: npm download statistics via ecosyste.ms, read 18 Oct 2026, 14:53 UTC.
OpenAI Codex CLI security practices and adoption
Security practices
OpenSSF Scorecard, an automated review of how the repository is run
- Code review0/10
- Branch protection4/10
- Dangerous workflow10/10
- Pinned dependencies9/10
- Security policy10/10
All 14 checks
- Maintained10/10
- OpenSSF Best Practices badge0/10
- Token permissions0/10
- License10/10
- Binary artifacts10/10
- Packaging10/10
- Fuzzing0/10
- Static analysis (SAST)0/10
- Signed releases8/10
Full report, run 12 Oct 2026
Used by other projects
deps.dev: npm packages that depend on @openai/codex 0.163.0
- Indirect dependents26
- All dependents36
- Registrynpm
Latest release
GitHub: files attached to the latest release and how often they were downloaded
- Versionrust-v0.163.0
- Published15 Oct 2026
- Downloads of its 318 files273,559
- Contributors478
Scorecard checks security practices such as code review, branch protection and pinned dependencies; it does not find bugs, and a low score does not mean the software is unsafe. Dependents and download counts show reach, not quality. Sources: OpenSSF Scorecard, deps.dev, GitHub, read 18 Oct 2026, 15:31 UTC.
Health score breakdown
| Part | Points | Based on |
|---|---|---|
| Activity | 35.0 / 35 | 3,988 commits in the last 91 days (full marks at 600) |
| Trend | 20.0 / 20 | 364% of last year’s pace (full marks at 100%) |
| Recency | 15.0 / 15 | last commit 0 days ago |
| Releases | 10.0 / 10 | latest GitHub release 3 days ago |
| Community | 20.0 / 20 | 2,420 pull requests merged in the last 91 days (full marks at 300) |
Open issues and pull requests: 23,376. The score summarises maintenance signals only, not quality or security. How the score works
OpenAI Codex CLI: common questions
Is OpenAI Codex CLI still maintained?
Yes. As of 18 October 2026, OpenAI Codex CLI received 3,988 commits in the last 91 days and its latest commit is from 18 October 2026, and no maintenance notice was found. Its health score is 100 out of 100.
What is the latest OpenAI Codex CLI release?
The latest GitHub release of OpenAI Codex CLI is rust-v0.163.0, published on 15 October 2026.
How many people contribute to OpenAI Codex CLI?
GitHub lists 478 contributors for OpenAI Codex CLI. 2,420 pull requests were merged in the last 91 days.
What licence does OpenAI Codex CLI use?
GitHub identifies the OpenAI Codex CLI licence as Apache-2.0. Read the licence file before commercial use.
How many times is OpenAI Codex CLI downloaded?
The @openai/codex package on npm was downloaded 93,017,254 times in the last month, according to ecosyste.ms (checked 18 October 2026). The count includes automated installs from CI pipelines and mirrors, so it is not a count of users.
Is OpenAI Codex CLI secure?
We cannot say whether the code is free of vulnerabilities. What can be measured is how the project is run: the OpenSSF Scorecard gives OpenAI Codex CLI 6.0 out of 10 for security practices (run 12 October 2026), covering checks such as code review, branch protection and pinned dependencies. Read the full report and the project’s security policy before relying on it.
How is the health score calculated?
It adds five parts from public GitHub data: commit activity over 91 days (35 points), the trend against the same period last year (20), how recent the last commit is (15), how recent the last release is (10) and merged pull requests (20). Archived projects score 0; a maintenance notice caps the score at 25. It measures maintenance signals only, not code quality or security.
Visitor rating
Have you used OpenAI Codex CLI? Rate it:
Ratings come from visitors, not from EvalAITools, and are not part of the health status above. One rating per visitor per tool every 30 days.
Daily snapshots
| Date (UTC) | Stars | Commits, last 91 days | Status |
|---|---|---|---|
| 18 Oct 2026 | 129,646 | 4,003 | Active |
| 17 Oct 2026 | 129,539 | 4,005 | Active |
| 16 Oct 2026 | 129,391 | 4,018 | Active |
One snapshot is stored per day, starting 16 October 2026. No status change has been recorded for OpenAI Codex CLI since then.
Other ai coding tools
| Tool | Status | Stars | Commits (91d) | vs last year |
|---|---|---|---|---|
| opencode | Active | 217k | 4,846 | +176% |
| OpenAI Codex CLI | Active | 130k | 3,988 | +264% |
| Gemini CLI | Slowing down | 107k | 202 | −87% |
| Cline | Active | 70.5k | 1,057 | +15% |
| Goose | Active | 55.4k | 751 | −8% |
| GPT Engineer | Archived | 55.0k | 0 | — |
| Aider | No recent commits | 49.6k | 0 | −100% |
| Continue | Maintenance mode | 36.2k | 3 | −100% |
| Tabby | No recent commits | 33.9k | 0 | −100% |
| GPT Pilot | Maintenance mode | 33.7k | 0 | −100% |
| Kilo Code | Active | 27.7k | 6,533 | +245% |
| Roo Code | Archived | 24.3k | 0 | −100% |
| SWE-agent | No recent commits | 20.6k | 0 | −100% |
| bolt.new | No recent commits | 16.6k | 0 | — |
Compare
Status badge
Show OpenAI Codex CLI’s live maintenance status in a README. The badge updates with this page and links back to it.
[](https://evalaitools.com/tools/openai-codex-cli/)Read next
How this is measured: commits on the repository’s default branch counted through the GitHub API, the last 91 days against the same 91 days a year earlier; archived flag and licence from the repository; README checked daily for maintenance notices. Commit counts measure activity, not quality, and we have not tested this tool ourselves for this page.