claude-codex-proxy-git

LOW

maintainer greg2010 0 votes scanned 2026-08-22 17:18:20.171967

View on AUR

Why flagged

The package builds from source hosted on the maintainer's GitHub; it is a transparent Rust project with no remote code execution or obfuscated payloads, and the only risk is the low-trust origin due to few votes and recent upload.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from source hosted on the maintainer's GitHub; it is a transparent Rust project with no remote code execution or obfuscated payloads, and the only risk is the low-trust origin due to few votes and recent upload.

PKGBUILD

      1# Maintainer: Grigory Romodanovskiy
    
      2pkgname=claude-codex-proxy-git
    
      3pkgver=r9.3258c6d
    
      4pkgrel=1
    
      5pkgdesc='Local Anthropic relay that replaces Claude models with GPT models via Codex'
    
      6arch=('x86_64')
    
      7url='https://github.com/greg2010/claude-codex-proxy'
    
      8license=('MIT')
    
      9depends=('gcc-libs')
    
      10makedepends=('cargo' 'git')
    
      11# ring's C objects are gcc-LTO bitcode under makepkg's default lto option,
    
      12# which rust-lld cannot link.
    
      13options=(!lto)
    
      14provides=('claude-codex-proxy')
    
      15conflicts=('claude-codex-proxy')
    
      16source=("$pkgname::git+$url.git")
    
      17sha256sums=('SKIP')
    
      18
    
      19pkgver() {
    
      20  cd "$pkgname"
    
      21  printf 'r%s.%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short HEAD)"
    
      22}
    
      23
    
      24prepare() {
    
      25  cd "$pkgname"
    
      26  export RUSTUP_TOOLCHAIN=stable
    
      27  cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      28}
    
      29
    
      30build() {
    
      31  cd "$pkgname"
    
      32  export RUSTUP_TOOLCHAIN=stable
    
      33  export CARGO_TARGET_DIR=target
    
      34  cargo build --frozen --release
    
      35}
    
      36
    
      37check() {
    
      38  cd "$pkgname"
    
      39  timeout 300 cargo test --frozen --release
    
      40}
    
      41
    
      42package() {
    
      43  cd "$pkgname"
    
      44  install -Dm755 'target/release/claude-codex-proxy' "$pkgdir/usr/bin/claude-codex-proxy"
    
      45  install -Dm755 'scripts/claudex' "$pkgdir/usr/bin/claudex"
    
      46  install -Dm644 'packaging/arch/claude-codex-proxy.socket' "$pkgdir/usr/lib/systemd/user/claude-codex-proxy.socket"
    
      47  install -Dm644 'packaging/arch/claude-codex-proxy.service' "$pkgdir/usr/lib/systemd/user/claude-codex-proxy.service"
    
      48  install -Dm644 'LICENSE' "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      49}
    
      50

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-22 17:18:20	Low	2