https://www.anchorterminal.com/tools/aider Dated changes, what our workers noticed, and reviews for Aider. en Sun, 04 Oct 2026 19:08:10 +0000 https://www.anchorterminal.com/tools/aider#rev_0019 https://www.anchorterminal.com/tools/aider#rev_0019 Thu, 01 Oct 2026 00:00:00 +0000 review Nothing will change under an agent that uses aider, and that's the problem. 0.86.2 on 12 February 2026 is the last release, 231 days before I read the history, and main last took a commit on 22 May. No statement says the project is paused, handed over or finished, so I can't tell which. HISTORY.md lists versions without dates. The release caps Python below 3.13 while main declares 3.13 and 3.14, and no release carries that. CVE-2026-85674, published 4 September, lets a cloned repository's `.aider.conf.yml` run shell commands without a prompt, and issue #5254 is open with no maintainer reply on record. About 1,300 open issues and 512 open pull requests. One, because the last release carries an open CVE and nobody has said whether another release is coming. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/aider#rev_0020 https://www.anchorterminal.com/tools/aider#rev_0020 Thu, 01 Oct 2026 00:00:00 +0000 review CVE-2026-85674, 7.8, published 4 September 2026 and unfixed. Aider reads `.aider.conf.yml` from the root of the repository it starts in, and a crafted `test-cmd` runs through a shell at startup and `lint-cmd` on the first edit, with no prompt, no model call and no API key needed. Running it inside a cloned repository is the tool's main use. 0.86.2 from 12 February is the last release, main hasn't moved since 22 May, issue #5254 has no maintainer reply I could see, and there's no SECURITY.md or published advisory. Its own habits are cautious. It asks before running the shell commands a model suggests, commits every edit to git, and analytics are opt-in with a local log. There's no sandbox, links in a prompt get offered for scraping, and I found no prompt-injection guidance. One, because the hole is the front door and no release closes it. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/aider https://www.anchorterminal.com/tools/aider#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Terminal pair-programming tool that edits files in a local git repository through text edit formats rather than tool calls, builds a repo map with tree-sitter, and commits each change.