Live data from Hacker News

OpenCode – Open source AI coding agent

opencode.ai

321–330 of 700 posts

Re: OpenCode – Open source AI coding agent

#321
post #244

Earlier quoted context omitted.

> I’m sure we’ll all learn a lot from these early days of agentic coding. So far what I am learning (from watching all of this) is that our constant claims that quality and security matter seem to not be true on average. Depressingly.

> our constant claims that quality and security matter I'm 13 years into this industry, this is the first I'm hearing of this.

I’ve heard the "S" in IoT stands for Security.

Re: OpenCode – Open source AI coding agent

#322

By default OpenCode sends all of your prompts to Grok's free tier to come up with chat summaries for the UI. To change that, you need to set a custom "small model" in the settings.

Also, even when using local models in ollama or lmstudio, prompts are proxied via their domain, so never put anything sensitive even when using local setup

https://old.reddit.com/r/LocalLLaMA/comments/1rv690j/opencod...

They also don't let you run all local models, but specific whitelisted by another 3rd party: https://github.com/anomalyco/opencode/issues/4232

Re: OpenCode – Open source AI coding agent

#323

OpenCode was the first open source agent I used, and my main workhorse after experimenting briefly with Claude Code and realizing the potential of agentic coding. Due to that, and because it's a popular an open source alternative, I want to be able to recommend it and be enthusiastic about it. The problem for me is that the development practices of the people that are working on it are suboptimal at best; they're con…

I am more concerned about their, umm, gallant approach to security. Not only that OpenCode is permissive by default in what it is allowed to do, but that it apparently tries to pull its config from the web (provider-based URL) by default [1]. There is also this open GitHub issue [2], which I find quite concerning (worst case, it's an RCE vulnerability). [1] https://opencode.ai/docs/config/#precedence-order [2] https:…

[flagged]

Re: OpenCode – Open source AI coding agent

#324
post #203

Earlier quoted context omitted.

I am more concerned about their, umm, gallant approach to security. Not only that OpenCode is permissive by default in what it is allowed to do, but that it apparently tries to pull its config from the web (provider-based URL) by default [1]. There is also this open GitHub issue [2], which I find quite concerning (worst case, it's an RCE vulnerability). [1] https://opencode.ai/docs/config/#precedence-order [2] https:…

I second that. Have fun on windows - automatic no from me. https://github.com/anomalyco/opencode/issues?q=is%3Aissue%20...

No surprise that a tool that can run shell scripts, open URLs, etc. is flagged down on Windows where AV try to detect such trojan methods.

Re: OpenCode – Open source AI coding agent

#325
I see it uses massive resources for TUI interfaces like 1GB+ of RAM.

I wonder why did they use Typescript and not a more resource efficient language like C, C++, Rust, Zig?

Since their code is generated by AI human preferences shouldn't matter much and AI is happy to work with any language.

Re: OpenCode – Open source AI coding agent

#326

The maintaining team is incredibly petty though. Tantrums when they weren't allowed to abuse Claude subscriptions and had to use the API instead. They just removed API support entirely.

‘abuse’. The same rate limits apply, the requests still go to the same endpoints.

Even as a CC user I’m glad someone is forcing the discussion.

My prediction: within two years ‘model neutrality’ will be a topic of debate. Creating lock-in through discount pricing is anti-competitive. The model provider is the ISP; the tool, the website.

Re: OpenCode – Open source AI coding agent

#327

OpenCode was the first open source agent I used, and my main workhorse after experimenting briefly with Claude Code and realizing the potential of agentic coding. Due to that, and because it's a popular an open source alternative, I want to be able to recommend it and be enthusiastic about it. The problem for me is that the development practices of the people that are working on it are suboptimal at best; they're con…

The moment that OpenCode, after helping fix a Dockerfile issue, decided it was time to deploy to prod without asking for consent, I was out.

Re: OpenCode – Open source AI coding agent

#328
post #11
post #8

Earlier quoted context omitted.

Yep. That's what I do. Just API keys and you can switch from Opus to GPT especially this week when Opus has been kind of wonky.

'just API key' lol. just hundreds of dollars at a minimum

Yes. And many companies pay that.

Re: OpenCode – Open source AI coding agent

#329
post #265

Earlier quoted context omitted.

Yes, you are doing it too with antropic an xAI. I don't get your point. xAI and OpenAI are a little worst? Maybe, still very well fascism.

IMO, OpenAI have either implicitly committed to becoming the IT service for Trump's secret police, or they've willingly signed up for the harsh retaliation Anthropic's getting, knowing that the Trump administration will inevitably try to push OpenAI around in the same way, if they meaningfully refuse to assist in domestic mass surveillance efforts.

Anthropic was fine doing the same, they just didn't want it done to Americans.

Re: OpenCode – Open source AI coding agent

#330

Earlier quoted context omitted.

We're still in the very early days of generative AI, and people and markets are already prioritizing quality over quantity. Quantity is irrelevant when it comes value. All code is not fungible, "irreverent code that kinda looks okay at first glance" might be a commodity, but well-tested, well-designed and well-understood code is what's valuable.

Generative what? Code is not a thing anymore, in fact it never really was, but now it's definitely not. Code today can be as verbose and ugly as ever, because from here on out, fewer people are going to read it, understand and care about it. What's valuable, and you know this I think, is how much money your software will sell for, not how fine and polished your code is. Code was a liability. Today it's a liability th…

I would think that the better the code is designed and factored and refactored, the easier it is to maintain and evolve, detect and remove bugs and security vulnerabilties from it. The ease of maintenance helps both AI and humans.

There are limits to what even AI can do to code, within practical time-limits. Using AI also costs money. So, easier it is to maintain and evolve a piece of software, the cheaper it will be to the owners of that application.

Post reply on HN