registry / codex-plus-patcher / 0.12.0

codex-plus-patcher@0.12.0

Patch queue tool for building a local Codex Plus.app from an installed Codex.app.

Static Scan Results

scanned 18d ago · by rust-scanner

Static analysis completed at 65.0% confidence. No malicious behavior was detected; 7 low-signal pattern(s) were surfaced and cleared.

Static reason

No blocking static signals were detected.

Decision evidence

public snapshot

Behavioral surface

Source

ChildProcessCryptoDynamicRequireEnvironmentVarsFilesystemNetworkWebSocket

Supply chain

HighEntropyStringsUrlStrings

ManifestNo manifest risk signals triggered.

scanned 70 file(s), 459 KB of source, external domains: 127.0.0.1, api.github.com, example.invalid, github.com, mermaid.live

Source & flagged code

1 flagged

src/core/plugin-audit.jsView file

Lines 1-21javascript

1const childProcess = require("node:child_process");

2const fs = require("node:fs");

Medium

Dynamic Require

Package source references dynamic require/import behavior.

src/core/plugin-audit.jsView on unpkg · L1

3const http = require("node:http");

4const net = require("node:net");

5const os = require("node:os");

6const path = require("node:path");

8const {

9 DEFAULT_DEV_HOME,

10 DEFAULT_ELECTRON_USER_DATA,

11 launchDevApp,

12 syncDevHome,

13} = require("./dev-mode");

14const {

15 buildAuditFixture,

16 seedAuditFixtureBrowserState,

17} = require("./audit-fixture");

18const { patchCodexApp } = require("./patch-engine");

19const { patchSets } = require("../patches");

20const packageJson = require("../../package.json");

Source & flagged code

1 flagged · loading source

src/core/plugin-audit.jsView file

Static Scan Results

Decision evidence

Source & flagged code

Source & flagged code

Findings

Source & flagged code