Tmux IDE AI Agent

by wavyrai• 559•• Scanned•Claim this listing•Request removal
Coding Agentsagent orchestrationclaude codecodexcoding agentcoding agents

The open-source tmux for your coding agents

Tmux IDE is an open-source ai agent by wavyrai, written mainly in TypeScript, with 559 GitHub stars and the MIT license. Its code was last updated Oct 30, 2026.

Scan summary: scanned Nov 5, 2026 at commit 29c22b8. Seen able to run dynamic code. Scan policy

aboutREADMEsecurityreviews
Scanned
Full scan at 29c22b8 · Nov 5, 2026
Scanned
Static code scanpass
Secrets scanfail
Dependency audit77 known vulnerabilitiesfail
Manifestnonewarn
Buildfail
Boot & handshaken/a
Network egressn/a
Reproducible (×3)n/a

Findings (68)

  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    @modelcontextprotocol/server@2.1.0: 3 known vulnerabilities
    GHSA-46jr-4wx8-v453, GHSA-jm63-cq47-j5jp, GHSA-rvq5-wwqv-78pq
    pnpm-lock.yaml
  • medium
    brace-expansion@2.1.4: 3 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
    pnpm-lock.yaml
  • medium
    brace-expansion@5.0.9: 3 known vulnerabilities
    GHSA-6j4f-fj2g-mc7p, GHSA-q2hr-2g5m-vwhr, GHSA-qhr7-859c-m2p7
    pnpm-lock.yaml
  • medium
    happy-dom@20.12.0: 3 known vulnerabilities
    GHSA-5fpq-26gf-qwcr, GHSA-834v-8h66-3h79, GHSA-c8p4-j97h-3vg8
    pnpm-lock.yaml
  • medium
    js-yaml@4.3.1: 1 known vulnerability
    GHSA-2883-xcg3-v3hh
    pnpm-lock.yaml
  • medium
    sharp@0.35.3: 2 known vulnerabilities
    GHSA-rgj7-g3m4-5g8c, GHSA-wq5f-xc86-pv6w
    pnpm-lock.yaml
  • medium
    source-map-js@1.2.1: 1 known vulnerability
    GHSA-68fv-2mgg-jv7q
    pnpm-lock.yaml
  • medium
    vite@8.1.4: 5 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22
    pnpm-lock.yaml
  • medium
    vite@8.2.2: 6 known vulnerabilities
    GHSA-587h-7wmj-h5pm, GHSA-698v-4r3x-3vcv, GHSA-9jrq-w75r-8gcw, GHSA-r825-w8mm-5pxw, GHSA-rq7h-c2jc-7f22 +1 more
    pnpm-lock.yaml
  • medium
    zod@4.3.6: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    pnpm-lock.yaml
  • medium
    Install or build failed in a clean environment
    w/scripts/build-cli.mjs:111:1 at process.processTicksAndRejections (node:internal/process/task_queues:103:5) { errno: -1, code: 'EPERM', syscall: 'chmod', path: '/w/bin/cli.js' } Node.js v22.23.4  ELIFECYCLE  Command failed with exit code 1.  ELIFECYCLE  Command failed with exit code 1.
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    docs/app/(home)/privacy/page.tsx:71
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    docs/app/agents.md/route.ts:60
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    docs/lib/landing-content.ts:51
  • low
    In tests/examples/docs: Downloads a script and pipes it straight into a shell (often an installer command shown to users; check where it runs).
    docs/lib/site.ts:20
  • low
    In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.
    packages/contracts/src/__tests__/desktop-host.test.ts:62
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    scripts/lib/installer-service-qualification.test.mjs:17
  • low
    In tests/examples/docs: Executes dynamically built code (eval / new Function / vm).
    scripts/lib/service-command-diagnostics.test.mjs:14
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/tmux-gpui/fixtures/nr04-links-publication.json:1
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    apps/tmux-gpui/upstream/crates/tmux-ide-gpui/src/tmux_snapshot/pane_actions/tests/split.rs:23
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    apps/tmux-gpui/upstream/crates/tmux-ide-gpui/src/tmux_snapshot/picker/tests/fleet_retry.rs:7
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/tmux-gpui/upstream/crates/tmux-ide-gpui/src/tmux_snapshot/picker/tests/header_scope.rs:13
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/tmux-gpui/upstream/crates/tmux-ide-gpui/src/tmux_snapshot/picker/tests/new_agent.rs:30
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/tmux-gpui/upstream/crates/tmux-ide-gpui/src/tmux_snapshot/picker/tests/scoped_surface.rs:13
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/tmux-gpui/upstream/crates/tmux-ide-gpui/src/tmux_snapshot/picker/tests/unavailable_window_control.rs:31
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/tmux-gpui/upstream/crates/tmux-ide-gpui/src/tmux_snapshot/picker/tests/sidebar_visibility.rs:113
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    apps/tmux-gpui/upstream/crates/tmux-ide-gpui/src/tmux_snapshot/picker/tests/fleet_disconnect.rs:9
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/tmux-gpui/upstream/crates/tmux-ide-gpui/src/tmux_snapshot/picker/tests/pane_close.rs:35
  • low
    Possible example credential in docs/tests: generic-api-key
    apps/tmux-gpui/upstream/crates/tmux-ide-gpui/src/tmux_snapshot/picker/tests/pane_commands.rs:186
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    packages/contracts/src/__tests__/fleet-catalog.test.ts:27
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/core/src/terminal-replica-cooperative.test.ts:233
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/daemon/src/lib/__tests__/daemon-peer-reset-live.test.ts:63
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/daemon/src/lib/__tests__/workspace-open.test.ts:368
  • low
    Possible example credential in docs/tests: generic-api-key
    packages/daemon/src/terminal/__tests__/direct-websocket.test.ts:368
  • low
    bincode@2.0.1: 1 known vulnerability
    RUSTSEC-2025-0141
    apps/tmux-gpui/upstream/Cargo.lock
  • low
    paste@1.0.15: 2 known vulnerabilities
    RUSTSEC-2024-0436, RUSTSEC-2024-0436
    apps/tmux-gpui/upstream/Cargo.lock
  • low
    rustls@0.23.45: 4 known vulnerabilities
    RUSTSEC-2026-0346, RUSTSEC-2026-0347, RUSTSEC-2026-0348, RUSTSEC-2026-0349
    apps/tmux-gpui/upstream/Cargo.lock
  • low
    rustls-pemfile@2.2.0: 1 known vulnerability
    RUSTSEC-2025-0134
    apps/tmux-gpui/upstream/Cargo.lock
  • low
    rustls-webpki@0.103.15: 1 known vulnerability
    RUSTSEC-2026-0382
    apps/tmux-gpui/upstream/Cargo.lock
  • low
    rustybuzz@0.20.1: 2 known vulnerabilities
    RUSTSEC-2026-0206, RUSTSEC-2026-0206
    apps/tmux-gpui/upstream/Cargo.lock
  • low
    ttf-parser@0.25.1: 2 known vulnerabilities
    RUSTSEC-2026-0192, RUSTSEC-2026-0192
    apps/tmux-gpui/upstream/Cargo.lock
  • low
    webpki-root-certs@1.0.9: 1 known vulnerability
    RUSTSEC-2026-0383
    apps/tmux-gpui/upstream/Cargo.lock
  • low
    webpki-roots@1.0.9: 1 known vulnerability
    RUSTSEC-2026-0381
    apps/tmux-gpui/upstream/Cargo.lock
  • low
    zbus_names@4.3.4: 1 known vulnerability
    RUSTSEC-2026-0371
    apps/tmux-gpui/upstream/Cargo.lock
  • low
    zvariant@5.15.0: 1 known vulnerability
    RUSTSEC-2026-0370
    apps/tmux-gpui/upstream/Cargo.lock
  • low
    zvariant_derive@5.15.0: 1 known vulnerability
    RUSTSEC-2026-0372
    apps/tmux-gpui/upstream/Cargo.lock
  • low
    @hono/node-server@2.1.0: 1 known vulnerability
    GHSA-rmxm-3fg6-px4f
    pnpm-lock.yaml
  • low
    @humanfs/node@0.16.7: 1 known vulnerability
    GHSA-p498-v437-472g
    pnpm-lock.yaml
  • low
    @vitest/mocker@4.1.6: 2 known vulnerabilities
    GHSA-82fw-gwwq-j7x9, GHSA-qxg6-89mg-rqv8
    pnpm-lock.yaml
  • low
    glob@9.3.5: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    pnpm-lock.yaml
  • low
    hono@4.12.34: 5 known vulnerabilities
    GHSA-5r4p-p66f-jhc7, GHSA-crvj-82cr-hjcx, GHSA-g6gw-c38x-mqfc, GHSA-gqvv-2mrq-wpjv, GHSA-hxh3-vqpv-xpqv
    pnpm-lock.yaml
  • low
    minimatch@10.2.4: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    minimatch@8.0.7: 1 known vulnerability
    GHSA-g3hv-75wg-m249
    pnpm-lock.yaml
  • low
    vitest@4.1.6: 1 known vulnerability
    GHSA-82fw-gwwq-j7x9
    pnpm-lock.yaml
  • low
    package.json has a postinstall script
    node scripts/postinstall.js
    package.json
  • low
    No manifest declaring network access and environment variables (agent.json)

Network activity

During install
registry.npmjs.org
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Tmux IDE alternatives

View more →

Similar ai agents in Coding Agents, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Tmux IDE (this page)
wavyrai
559MITOct 30, 2026Scanned, no flagged issues
AutoGPT
Significant-Gravitas
188kNone foundNov 1, 2026Not scanned yet
Langchain
langchain-ai
149kMITNov 1, 2026Scanned, no flagged issues
Gemini CLI
google-gemini
109kApache-2.0Nov 1, 2026Scanned, no flagged issues
MetaGPT
FoundationAgents
71kMITJan 21, 2026Scanned, no flagged issues
Oh My Openagent
code-yeongyu
71kNone foundNov 1, 2026Not scanned yet