Local project keep getting installed with @opencode-ai/plugin on opencode launch #7953

Open
opened 2026-02-16 18:08:46 -05:00 by yindo · 1 comment
Owner

Originally created by @feiwhang on GitHub (Jan 29, 2026).

Originally assigned to: @rekram1-node on GitHub.

Description

If there's .opencode/ in any local dir, it would create these on every launch.

.opencode/
├── bun.lock
├── node_modules
└── package.json

Plugins

No response

OpenCode version

1.1.42

Steps to reproduce

  1. Create random dir mkdir reproduce_oc/
  2. Create mkdir reproduce_oc/.opencode
  3. cd reproduce_oc
  4. opencode
  5. Take note of files inside .opencode/

Screenshot and/or share link

No response

Operating System

macOS

Terminal

iTerm2

Originally created by @feiwhang on GitHub (Jan 29, 2026). Originally assigned to: @rekram1-node on GitHub. ### Description If there's .opencode/ in any local dir, it would create these on every launch. ``` .opencode/ ├── bun.lock ├── node_modules └── package.json ``` ### Plugins _No response_ ### OpenCode version 1.1.42 ### Steps to reproduce 1. Create random dir `mkdir reproduce_oc/` 2. Create `mkdir reproduce_oc/.opencode` 3. `cd reproduce_oc` 4. `opencode` 5. Take note of files inside `.opencode/` ### Screenshot and/or share link _No response_ ### Operating System macOS ### Terminal iTerm2
yindo added the bug label 2026-02-16 18:08:46 -05:00
Author
Owner

@github-actions[bot] commented on GitHub (Jan 29, 2026):

This issue might be a duplicate of existing issues. Please check:

  • #10484: OpenCode Attempts Package Installation on Startup Despite Auto-Update Being Disabled - Similar issue where packages are installed unexpectedly on startup even when auto-update is disabled
  • #8729: Disable force dependency update while starting - Describes the same forced dependency reinstallation behavior happening on every launch, creating .opencode directories with node_modules, bun.lock, and package.json files
  • #3191: Opencode adds stuff to global config folder - Related issue about unwanted file creation in .opencode directories
  • #7173: Security Issue - Lifecycle Script Execution via .opencode/package.json - Security-related issue showing that .opencode/package.json files are executed automatically

Feel free to ignore if none of these address your specific case.

@github-actions[bot] commented on GitHub (Jan 29, 2026): This issue might be a duplicate of existing issues. Please check: - #10484: OpenCode Attempts Package Installation on Startup Despite Auto-Update Being Disabled - Similar issue where packages are installed unexpectedly on startup even when auto-update is disabled - #8729: Disable force dependency update while starting - Describes the same forced dependency reinstallation behavior happening on every launch, creating .opencode directories with node_modules, bun.lock, and package.json files - #3191: Opencode adds stuff to global config folder - Related issue about unwanted file creation in .opencode directories - #7173: Security Issue - Lifecycle Script Execution via .opencode/package.json - Security-related issue showing that .opencode/package.json files are executed automatically Feel free to ignore if none of these address your specific case.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#7953