codex-locality-bin

LOW

maintainer emilss 0 votes scanned 2026-08-25 13:26:42.022164

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to the binary nature and unverifiable origin, but it comes from a trusted project host with no signs of malicious behavior.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal distribution method; the low severity is due to the binary nature and unverifiable origin, but it comes from a trusted project host with no signs of malicious behavior.

PKGBUILD

      1# Maintainer: Emil <emil@esnx.xyz>
    
      2
    
      3pkgname=codex-locality-bin
    
      4pkgver=0.r1.g7c6eb0eef1
    
      5pkgrel=1
    
      6pkgdesc="OpenAI Codex CLI with Syncthing-safe workspace-local sessions"
    
      7arch=('x86_64')
    
      8url="https://github.com/sssemil/codex-locality-bin"
    
      9license=('Apache-2.0')
    
      10depends=('glibc' 'ncurses')
    
      11provides=('openai-codex')
    
      12conflicts=('openai-codex' 'openai-codex-bin' 'codex-bin')
    
      13optdepends=('git: repository-aware Codex workflows')
    
      14options=('!debug' '!lto' '!strip')
    
      15
    
      16source_x86_64=("codex-locality-runtime-0.r1.g7c6eb0eef1-x86_64-unknown-linux-musl.tar.zst::https://github.com/sssemil/codex-locality-bin/releases/download/0.r1.g7c6eb0eef1-1/codex-locality-runtime-0.r1.g7c6eb0eef1-x86_64-unknown-linux-musl.tar.zst")
    
      17sha256sums_x86_64=('9b7176ea38fcf86d1dfdc59c37c1120fd11e2d9f3bd6532202b8fd5a47362e34')
    
      18
    
      19package() {
    
      20    local runtime_root="${srcdir}/codex-locality-runtime"
    
      21    local install_root="${pkgdir}/usr/lib/codex-locality"
    
      22
    
      23    install -d -m755 "${install_root}"
    
      24    cp -a "${runtime_root}/." "${install_root}/"
    
      25
    
      26    install -d -m755 "${pkgdir}/usr/bin"
    
      27    ln -s /usr/lib/codex-locality/bin/codex "${pkgdir}/usr/bin/codex"
    
      28
    
      29    install -d -m755 \
    
      30        "${pkgdir}/usr/share/bash-completion/completions" \
    
      31        "${pkgdir}/usr/share/fish/vendor_completions.d" \
    
      32        "${pkgdir}/usr/share/zsh/site-functions"
    
      33    "${runtime_root}/bin/codex" completion bash \
    
      34        >"${pkgdir}/usr/share/bash-completion/completions/codex"
    
      35    "${runtime_root}/bin/codex" completion fish \
    
      36        >"${pkgdir}/usr/share/fish/vendor_completions.d/codex.fish"
    
      37    "${runtime_root}/bin/codex" completion zsh \
    
      38        >"${pkgdir}/usr/share/zsh/site-functions/_codex"
    
      39
    
      40    install -Dm644 "${runtime_root}/LICENSE" \
    
      41        "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      42    install -Dm644 "${runtime_root}/NOTICE" \
    
      43        "${pkgdir}/usr/share/licenses/${pkgname}/NOTICE"
    
      44}
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-25 13:26:42	Low	2