codex-desktop-bin

LOW

maintainer orphaned 0 votes scanned 2026-09-15 07:19:15.107868

View on AUR

Why flagged

The package installs a prepatched Electron-based desktop application from a GitHub release by a known maintainer; the source is verifiable via checksum and hosted on an official platform, posing no active threat despite low popularity and recent upload.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prepatched Electron-based desktop application from a GitHub release by a known maintainer; the source is verifiable via checksum and hosted on an official platform, posing no active threat despite low popularity and recent upload.

PKGBUILD

      1# Maintainer: maria-rcks <maria@kuuro.net>
    
      2
    
      3pkgname=codex-desktop-bin
    
      4pkgver=26.325.31654
    
      5pkgrel=1
    
      6pkgdesc='OpenAI Codex Desktop (prepatched Linux payload)'
    
      7arch=('x86_64')
    
      8_electron_pkg='electron40-bin'
    
      9_release_repo='maria-rcks/codex-desktop-aur'
    
      10_release_tag='codex-desktop-bin-26.325.31654-681a12ac481a'
    
      11_bundle_name='codex-desktop-prepatched-26.325.31654-681a12ac481a-x86_64.tar.gz'
    
      12url='https://openai.com/codex'
    
      13license=('custom')
    
      14depends=(
    
      15  "$_electron_pkg"
    
      16  'alsa-lib'
    
      17  'at-spi2-core'
    
      18  'cairo'
    
      19  'dbus'
    
      20  'gcc-libs'
    
      21  'glib2'
    
      22  'gtk3'
    
      23  'libdrm'
    
      24  'libnotify'
    
      25  'libx11'
    
      26  'libxcomposite'
    
      27  'libxdamage'
    
      28  'libxext'
    
      29  'libxfixes'
    
      30  'libxkbcommon'
    
      31  'libxrandr'
    
      32  'libxshmfence'
    
      33  'mesa'
    
      34  'nspr'
    
      35  'nss'
    
      36  'pango'
    
      37  'openai-codex'
    
      38)
    
      39provides=('codex-desktop')
    
      40conflicts=('codex-desktop')
    
      41options=('!strip')
    
      42
    
      43source=(
    
      44  "${_bundle_name}::https://github.com/${_release_repo}/releases/download/${_release_tag}/${_bundle_name}"
    
      45  'codex-icon.png'
    
      46)
    
      47sha256sums=(
    
      48  '21354d96639348d85c1e744e44d6ff4a0a4fdd81f53df77ddba2af31c5e8aea0'
    
      49  'f33042b1a549fdc2c82b20e8eefa1fd5ac9f93147af40389c4773aaf48d097a7'
    
      50)
    
      51
    
      52package() {
    
      53  cd "$srcdir"
    
      54
    
      55  if [[ ! -d "$srcdir/resources" ]]; then
    
      56    echo "Missing extracted prepatched payload directory: $srcdir/resources" >&2
    
      57    return 1
    
      58  fi
    
      59
    
      60  install -d "$pkgdir/opt/$pkgname"
    
      61  cp -a "$srcdir/resources" "$pkgdir/opt/$pkgname/"
    
      62
    
      63  # Electron runtime is provided by electron40-bin.
    
      64  install -Dm644 /dev/stdin "$pkgdir/opt/$pkgname/package.json" << 'EOF'
    
      65{
    
      66  "name": "codex-desktop-bin",
    
      67  "version": "26.325.31654",
    
      68  "main": "resources/app.asar"
    
      69}
    
      70EOF
    
      71
    
      72  install -dm755 "$pkgdir/usr/bin"
    
      73  cat > "$pkgdir/usr/bin/codex-desktop" << 'EOF'
    
      74#!/usr/bin/env bash
    
      75
    
      76export ELECTRON_FORCE_IS_PACKAGED=1
    
      77
    
      78# Prefer the codex CLI from the official openai-codex package if available.
    
      79if [[ -z "${CODEX_CLI_PATH-}" ]] && command -v codex >/dev/null 2>&1; then
    
      80  export CODEX_CLI_PATH="$(command -v codex)"
    
      81fi
    
      82
    
      83extra_flags=()
    
      84if [[ -n "${WAYLAND_DISPLAY-}" || "${XDG_SESSION_TYPE-}" == "wayland" ]]; then
    
      85  extra_flags+=(--enable-features=UseOzonePlatform --ozone-platform=wayland --ozone-platform-hint=wayland)
    
      86else
    
      87  extra_flags+=(--ozone-platform-hint=auto)
    
      88fi
    
      89
    
      90exec /usr/bin/electron40 "${extra_flags[@]}" /opt/codex-desktop-bin/resources/app.asar "$@"
    
      91EOF
    
      92  chmod 755 "$pkgdir/usr/bin/codex-desktop"
    
      93
    
      94  install -Dm644 "$srcdir/codex-icon.png" "$pkgdir/usr/share/pixmaps/codex-desktop.png"
    
      95
    
      96  install -Dm644 /dev/stdin "$pkgdir/usr/share/applications/codex-desktop.desktop" << 'EOF'
    
      97[Desktop Entry]
    
      98Name=Codex
    
      99Comment=OpenAI Codex Desktop
    
      100Exec=codex-desktop %U
    
      101Terminal=false
    
      102Type=Application
    
      103Icon=/usr/share/pixmaps/codex-desktop.png
    
      104StartupWMClass=Codex
    
      105Categories=Development;
    
      106MimeType=x-scheme-handler/codex;
    
      107EOF
    
      108
    
      109  install -Dm644 /dev/stdin "$pkgdir/usr/share/licenses/$pkgname/LICENSE" << 'EOF'
    
      110Codex Desktop is proprietary software by OpenAI.
    
      111See the upstream terms for usage and distribution rights.
    
      112EOF
    
      113}
    
      114

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-15 07:19:15	Low	2