codex-app-unofficial-bin

maintainer kathehaering · 0 votes · scanned 2026-08-03 00:08:14.047287

LOW

Why flagged The package downloads a prebuilt binary from a GitHub release, which is a common but unverifiable source for unofficial builds; however, it does not execute remote code or exfiltrate data, and the risk is limited to supply-chain trust in the maintainer.

Triggered rules

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

LOW AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads a prebuilt binary from a GitHub release, which is a common but unverifiable source for unofficial builds; however, it does not execute remote code or exfiltrate data, and the risk is limited to supply-chain trust in the maintainer.

PKGBUILD

      1pkgname=codex-app-unofficial-bin
    
      2pkgver='26.727.51351_launcher.35'
    
      3pkgrel=1
    
      4pkgdesc='Unofficial Linux build of Codex from OpenAI'\''s Codex appcast feed.'
    
      5arch=('x86_64')
    
      6url='https://github.com/better-slop/codex-app-linux'
    
      7license=('custom')
    
      8depends=('alsa-lib' 'gtk3' 'libnotify' 'libsecret' 'libxss' 'nss' 'xdg-utils')
    
      9provides=('codex-app-linux-bin')
    
      10conflicts=('codex-app-linux-bin')
    
      11replaces=('codex-app-linux-bin')
    
      12install='codex-app-unofficial.install'
    
      13source=(
    
      14  'codex-app-linux-26.727.51351-launcher.35-x64-linux-unpacked.tar.gz::https://github.com/better-slop/codex-app-linux/releases/download/v26.727.51351-launcher.35/codex-app-linux-26.727.51351-launcher.35-x64-linux-unpacked.tar.gz'
    
      15  'generator'
    
      16  'codex-app-linux-26.727.51351-launcher.35-x64.png::https://github.com/better-slop/codex-app-linux/releases/download/v26.727.51351-launcher.35/codex-app-linux-26.727.51351-launcher.35-x64.png'
    
      17)
    
      18sha256sums=(
    
      19  'c39fea63fe4a5b7320a277c67b419a423517e84f6e1eba4c34a1400889407ffe'
    
      20  '1c926e380bfe6a50f40648dd9bc5de88da7271546491adf99ec72172e17df6a0'
    
      21)
    
      22
    
      23package() {
    
      24  install -dm755 "${pkgdir}/opt/codex-app-linux"
    
      25  cp -a "${srcdir}/linux-unpacked/." "${pkgdir}/opt/codex-app-linux/"
    
      26
    
      27  install -dm755 "${pkgdir}/usr/bin"
    
      28  ln -s "/opt/codex-app-linux/codex-app-linux" "${pkgdir}/usr/bin/codex-app-linux"
    
      29
    
      30  install -Dm644 "${srcdir}/codex-app-linux-26.727.51351-launcher.35-x64.png"     "${pkgdir}/usr/share/icons/hicolor/512x512/apps/codex-app-linux.png"
    
      31
    
      32  cat > "codex-app-linux.desktop" <<'EOF'
    
      33[Desktop Entry]
    
      34Name=Codex
    
      35Comment=Launch Codex on Linux
    
      36Exec=codex-app-linux %U
    
      37Terminal=false
    
      38Type=Application
    
      39Icon=codex-app-linux
    
      40Categories=Development;
    
      41StartupNotify=true
    
      42EOF
    
      43
    
      44  install -Dm644 "codex-app-linux.desktop"     "${pkgdir}/usr/share/applications/codex-app-linux.desktop"
    
      45
    
      46  install -Dm644 "${pkgdir}/opt/codex-app-linux/LICENSE.electron.txt"     "${pkgdir}/usr/share/licenses/codex-app-unofficial/LICENSE.electron.txt"
    
      47}
    
      48
    
      49

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-03 00:08:14	LOW	2
2026-08-02 00:16:08	LOW	2
2026-08-01 13:20:32	LOW	2