Aider

Aider is a command-line pair-programming agent: point it at a git repository and it edits files directly, using its own repo-map (built with tree-sitter) to give the model context on large codebases without ingesting every file. Changes are committed automatically with generated commit messages, so the normal review loop is git diff / git log, not an in-app undo stack. It works with over 100 languages and connects to almost any LLM provider — cloud or local — through LiteLLM, rather than being tied to one vendor.

Aider's compiled requirements.txt pins litellm==1.82.3, an exact, non-range pin refreshed on release rather than continuously. That pin dates from LiteLLM's 16 March 2026 upload and predates several LiteLLM security fixes: GHSA-53mr-6c8q-9789 (unauthenticated config-endpoint RCE, fixed 1.83.0), GHSA-jjhc-v7c2-5hh6 (OIDC cache collision, fixed 1.83.0), and a SHA-256 password-hashing weakness fixed the same release — all in LiteLLM's proxy component, which ships as an optional extra Aider does not install (Aider imports the litellm SDK directly, lazily, with no [proxy] extra in its requirements.in). Aider's own release notes describe bumping the pin only when picking up new model support, not on a security cadence, so anyone forking or vendoring Aider's dependency pin rather than installing from PyPI should not assume it tracks LiteLLM's upstream patches.

The most recent commit on Aider's main branch is dated 22 May 2026, and GitHub's issue search finds zero pull requests merged into Aider-AI/aider since that date, against roughly 8 merged in the comparable prior four-month window (22 Jan–22 May 2026). The last tagged release is v0.86.1 (9 August 2025 per GitHub Releases) and the last PyPI upload is 0.86.2 (12 February 2026); a v0.86.3.dev pre-release tag exists but was never published as a stable release or pushed to PyPI. Maintainer Paul Gauthier's most recent comment activity on the repository (via GitHub's issue search) predates the gap, and his only public commit activity since is on an unrelated personal repo, created 21 September 2026. The repository is not archived and stars continue to climb (49,163 as of today), so this reads as a maintenance slowdown rather than an abandonment, but there's no vendor statement explaining it and open PRs — including a bug-fix PR from mid-May — sit unmerged.

PyPI's advisory feed (sourced from GitHub Security Advisories / OSV) lists two low-severity, CVSS 6.3 vulnerabilities affecting aider-chat <= 0.86.2, both published 31 May 2026 with no fixed version listed: GHSA-7w7m-v5vp-w699, a code-injection path through Architect Mode's editor_coder.run (public exploit available; GitHub's advisory notes the project was informed early but 'has not responded yet'), and GHSA-hchg-qm84-cj9p, an SSRF via the AWS EC2 metadata endpoint in api_docs.py, for which a fix PR (#5137, 'Guard scraper against private network URLs') has sat open and unmerged since 16 May 2026. Both require some level of local access or an untrusted prompt reaching the model, so the practical exposure depends on how Aider is deployed — a solo developer running it locally is in a different position than a team wiring it into an automated pipeline that processes external input.

Apache License 2.0, confirmed via the repository's LICENSE.txt. Installs from PyPI as aider-chat; the vendor's own README badge claims 4.9M cumulative pip installs (unverified vendor claim), and PyPI's own recent-download counter shows roughly 268,000 downloads in the last 30 days as of today — a real, independently-sourced usage signal even if the cumulative figure isn't.