Aider vs OpenCode

Aider

Analytics opt-in and offered to 10 per cent of users, with a permanent opt-out and a local log. No release since 0.86.2 on 12 February 2026 and no commit since 22 May 2026.

OpenCode

Runs with no key or account on free OpenCode Zen models. Most permissions default to allow, and SECURITY.md says the permission system is not a sandbox.

Aider

1. Read .aider.conf.yml in any cloned repository before starting aider. Its test-cmd and lint-cmd run without asking
2. Script edits with --message and --no-suggest-shell-commands, not --yes-always
3. Use Python 3.12 or earlier for the PyPI release
4. Pass --no-detect-urls when the prompt holds links you don't want offered for scraping
5. Check git log after a run. Each edit is its own commit

OpenCode

1. Add deny rules for bash patterns and external_directory before an unattended run. Most tools default to allow
2. Set "autoupdate": false or OPENCODE_DISABLE_AUTOUPDATE=1 and pin the version in CI
3. Configure a provider key. With none, prompts go to free Zen models that may train on them
4. Set OPENCODE_SERVER_PASSWORD before opencode serve. Without it the server runs unauthenticated
5. Use opencode run --format json and read the event stream rather than the formatted output