OneCLI does not even have a security audit and a VC backed password manager believes that it is secure enough to integrate in their password manager.

I could not be anymore bearish on Bitwarden than before after looking at this and very glad that I don't use them.

I don't understand why this would change any opinion on Bitwarden. Bitwarden offers an API and OneCLI calls the Bitwarden API. How does a 3rd party calling Bitwarden's API say anything about Bitwarden?

Edit: I can see on Bitwarden's site they also call out their support for OneCLI, so I suppose that looks like Bitwarden saying they approve of and recommend OneCLI. But I see recommending an open source solution as a lot less problematic than recommending any other random private startup solution.

[dead]