opencodex-bin

LOW

maintainer xianhongtao 0 votes scanned 2026-09-23 05:39:25.987319

View on AUR

Why flagged

The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR packages; while the binary is not built from source, the source is verifiable via checksums and hosted on a trusted platform, posing minimal risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt binary from the project's official GitHub releases, which is a normal practice for AUR packages; while the binary is not built from source, the source is verifiable via checksums and hosted on a trusted platform, posing minimal risk.

PKGBUILD

      1# Maintainer: AUR package maintainer
    
      2pkgname=opencodex-bin
    
      3pkgver=2.63.0
    
      4pkgrel=2
    
      5pkgdesc='Universal provider proxy for OpenAI Codex and Claude Code (prebuilt Bun binary)'
    
      6arch=('x86_64' 'aarch64')
    
      7url='https://opencodex.me/'
    
      8license=('MIT')
    
      9depends=('bash' 'glibc')
    
      10options=('!strip' '!debug')
    
      11noextract=("ocx-${pkgver}-bun-linux-x64.tar.gz"
    
      12           "ocx-${pkgver}-bun-linux-arm64.tar.gz")
    
      13provides=('opencodex')
    
      14conflicts=('opencodex')
    
      15source=('ocx-launcher' 'LICENSE')
    
      16source_x86_64=("ocx-${pkgver}-bun-linux-x64.tar.gz::https://github.com/lidge-jun/opencodex/releases/download/v${pkgver}/ocx-${pkgver}-bun-linux-x64.tar.gz")
    
      17source_aarch64=("ocx-${pkgver}-bun-linux-arm64.tar.gz::https://github.com/lidge-jun/opencodex/releases/download/v${pkgver}/ocx-${pkgver}-bun-linux-arm64.tar.gz")
    
      18sha256sums=('e0a6be04768d456556e6dc180daeebd82a6416ae576b1948f1a4cb85607e87f5'
    
      19            '34012a5529ad1e574e84457a609f9ea3df03c63d7c42c7e5f74ec14f438ed346')
    
      20sha256sums_x86_64=('41021a5bc334584f688cee70a821b54a72590057f3ce626504c04607ae902b1c')
    
      21sha256sums_aarch64=('37913df1da5331f4c4fd847ec4e82679df89937fdd715e754e27ff5bc69e4688')
    
      22
    
      23prepare() {
    
      24  local _platform
    
      25  case $CARCH in
    
      26    x86_64) _platform=x64 ;;
    
      27    aarch64) _platform=arm64 ;;
    
      28    *) echo "Unsupported architecture: $CARCH" >&2; return 1 ;;
    
      29  esac
    
      30  install -dm755 "$srcdir/opencodex-payload"
    
      31  tar -xzf "$srcdir/ocx-${pkgver}-bun-linux-${_platform}.tar.gz" \
    
      32    -C "$srcdir/opencodex-payload"
    
      33}
    
      34
    
      35package() {
    
      36  local _binary _root
    
      37  # The upstream release keeps gui/dist beside ocx; preserve that layout.
    
      38  _binary="$(find "$srcdir/opencodex-payload" -type f -name ocx -print -quit)"
    
      39  if [[ -z $_binary ]]; then
    
      40    echo 'Could not find the ocx executable in the upstream archive' >&2
    
      41    return 1
    
      42  fi
    
      43  _root="$(dirname "$_binary")"
    
      44  if [[ ! -d "$_root/gui/dist" ]]; then
    
      45    echo 'Could not find gui/dist beside the ocx executable' >&2
    
      46    return 1
    
      47  fi
    
      48
    
      49  install -dm755 "$pkgdir/usr/lib/opencodex" "$pkgdir/usr/bin" \
    
      50    "$pkgdir/usr/share/licenses/$pkgname"
    
      51  cp -R "$_root/." "$pkgdir/usr/lib/opencodex/"
    
      52  chmod 755 "$pkgdir/usr/lib/opencodex/ocx"
    
      53  install -Dm755 "$srcdir/ocx-launcher" "$pkgdir/usr/bin/ocx"
    
      54  ln -s ocx "$pkgdir/usr/bin/opencodex"
    
      55  install -Dm644 "$srcdir/LICENSE" "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      56}
    
      57

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-23 05:39:25	Low	2