Releases: OpsMaxx/ShellPilot
Release list
0.28.3
First run
These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.
macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:
/usr/bin/xattr -dr com.apple.quarantine /Applications/OpsMaxx.appThat clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.
Windows — SmartScreen will warn. Choose More info → Run anyway.
Downloads
Windows
| File | Notes |
|---|---|
OpsMaxx-0.28.3-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
OpsMaxx-0.28.3-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
OpsMaxx-0.28.3-arm64.dmg |
Apple Silicon (M1 and later) |
OpsMaxx-0.28.3-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
OpsMaxx-0.28.3-x86_64.AppImage |
Any distribution — chmod +x and run |
OpsMaxx-0.28.3-amd64.deb |
Debian and Ubuntu — sudo apt install ./OpsMaxx-0.28.3-amd64.deb |
Source for the bundled OpenVPN
OpsMaxx bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28117/Tue Sep 8 06:26:31 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
OpsMaxx-0.28.3-setup.exeOpsMaxx-0.28.3-portable.exeOpsMaxx-0.28.3-x64.dmgOpsMaxx-0.28.3-arm64.dmgOpsMaxx-0.28.3-x86_64.AppImageOpsMaxx-0.28.3-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
OpsMaxx-0.28.3-amd64.deb |
627d053ea3f60caeb99794b2f07edd023eb2cabd53b26addcfd95472097ef1d9 |
OpsMaxx-0.28.3-arm64.dmg |
2cab9c77fa178683b96fb7ae67f8ef7af7a432b98f3ee6193cfc47baf4f07298 |
OpsMaxx-0.28.3-portable.exe |
8aa4dbb97d36812f4d718803e2d86d43d500624b6a35cf12e691183ec9c2ac32 |
OpsMaxx-0.28.3-setup.exe |
d952dce94a2d9572c75d80c88408e600b401da0a87c7876b786d358153bb7598 |
OpsMaxx-0.28.3-x64.dmg |
04ed5e50fe8e706fc0ea4ce46f13f4727d316cf932f6a14c45ca2b3d06b969d2 |
OpsMaxx-0.28.3-x86_64.AppImage |
186f0257e60b05893ef0184fce1c6c7a7787c617f6d539de16857a2a0b56bb30 |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
What's Changed
- Rebuild opsmaxx.dev when a release is published by @ZeeshanSultan in #20
Full Changelog: v0.28.2...v0.28.3
Contributors
Assets 15
- 538 Bytes
2026-09-08T18:26:23Z - 497 Bytes
2026-09-08T18:26:23Z - 346 Bytes
2026-09-08T18:26:23Z - 1.17 MB
2026-09-08T18:26:23Z - 127 MB
2026-09-08T18:26:23Z - 157 MB
2026-09-08T18:26:23Z - 171 KB
2026-09-08T18:26:23Z - 129 MB
2026-09-08T18:26:23Z - 129 MB
2026-09-08T18:26:23Z - 140 KB
2026-09-08T18:26:23Z -
2026-09-08T18:04:29Z -
2026-09-08T18:04:29Z - Loading
0.28.2
First run
These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.
macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:
/usr/bin/xattr -dr com.apple.quarantine /Applications/OpsMaxx.appThat clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.
Windows — SmartScreen will warn. Choose More info → Run anyway.
Downloads
Windows
| File | Notes |
|---|---|
OpsMaxx-0.28.2-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
OpsMaxx-0.28.2-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
OpsMaxx-0.28.2-arm64.dmg |
Apple Silicon (M1 and later) |
OpsMaxx-0.28.2-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
OpsMaxx-0.28.2-x86_64.AppImage |
Any distribution — chmod +x and run |
OpsMaxx-0.28.2-amd64.deb |
Debian and Ubuntu — sudo apt install ./OpsMaxx-0.28.2-amd64.deb |
Source for the bundled OpenVPN
OpsMaxx bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28117/Tue Sep 8 06:26:31 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
OpsMaxx-0.28.2-setup.exeOpsMaxx-0.28.2-portable.exeOpsMaxx-0.28.2-x64.dmgOpsMaxx-0.28.2-arm64.dmgOpsMaxx-0.28.2-x86_64.AppImageOpsMaxx-0.28.2-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
OpsMaxx-0.28.2-amd64.deb |
7e4e518adb7c4c71287c87e382864f370218b569bbdf3d20f34174cfadeb2e40 |
OpsMaxx-0.28.2-arm64.dmg |
1346c8a86e07862ee37130b02b3b3d65b2dbc57526df626310bbae3edc9a0752 |
OpsMaxx-0.28.2-portable.exe |
87eedf26a1410ea1ea9efe4560c59d0c89067c272bc9a367cc4359c0fc6e75e8 |
OpsMaxx-0.28.2-setup.exe |
b59013a378f0c2fe7ce75ce8a4d048ad54a2a2f84ea536d1e2eab926335f0515 |
OpsMaxx-0.28.2-x64.dmg |
d8be9249dbc97e82db6974fd190b73fa62a6da59d81ccc0fba9d95706d0dc558 |
OpsMaxx-0.28.2-x86_64.AppImage |
a236d0ad1526dcdbaad47bdfed0557148d1dfb534b699399c3adb51d545054b9 |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Full Changelog: v0.28.1...v0.28.2
0.28.1
First run
These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.
macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:
/usr/bin/xattr -dr com.apple.quarantine /Applications/OpsMaxx.appThat clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.
Windows — SmartScreen will warn. Choose More info → Run anyway.
Downloads
Windows
| File | Notes |
|---|---|
OpsMaxx-0.28.1-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
OpsMaxx-0.28.1-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
OpsMaxx-0.28.1-arm64.dmg |
Apple Silicon (M1 and later) |
OpsMaxx-0.28.1-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
OpsMaxx-0.28.1-x86_64.AppImage |
Any distribution — chmod +x and run |
OpsMaxx-0.28.1-amd64.deb |
Debian and Ubuntu — sudo apt install ./OpsMaxx-0.28.1-amd64.deb |
Source for the bundled OpenVPN
OpsMaxx bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28117/Tue Sep 8 06:26:31 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
OpsMaxx-0.28.1-setup.exeOpsMaxx-0.28.1-portable.exeOpsMaxx-0.28.1-x64.dmgOpsMaxx-0.28.1-arm64.dmgOpsMaxx-0.28.1-x86_64.AppImageOpsMaxx-0.28.1-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
OpsMaxx-0.28.1-amd64.deb |
705e80d3fad749c30f0e617dae49671f50b96dce751981c315f9b537921f58ea |
OpsMaxx-0.28.1-arm64.dmg |
8154f9911e36e69a55ac051c929f2eb2facdb7a47ccdce6b25f29136101013c6 |
OpsMaxx-0.28.1-portable.exe |
58f80db8c6e9d2d99a4b3f9c85a833ee075490bb21c5d553f1aaadcc45977c44 |
OpsMaxx-0.28.1-setup.exe |
fc261ab0cede74a6fdf89dd8520fae68b545a492b9b3d7f930aa941f809b1ed5 |
OpsMaxx-0.28.1-x64.dmg |
a812e93a09a282ad813d33ca6eccf224a26d64f348ee669d212bda144c528de9 |
OpsMaxx-0.28.1-x86_64.AppImage |
26d497bbad49b1ca583372bcaba01156c062695557db1165287b93da88259e8e |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Full Changelog: v0.28.0...v0.28.1
0.27.0
First run
These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.
macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:
/usr/bin/xattr -dr com.apple.quarantine /Applications/ShellPilot.appThat clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.
Windows — SmartScreen will warn. Choose More info → Run anyway.
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.27.0-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.27.0-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.27.0-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.27.0-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.27.0-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.27.0-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.27.0-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28117/Tue Sep 8 06:26:31 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.27.0-setup.exeShellPilot-0.27.0-portable.exeShellPilot-0.27.0-x64.dmgShellPilot-0.27.0-arm64.dmgShellPilot-0.27.0-x86_64.AppImageShellPilot-0.27.0-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.27.0-amd64.deb |
7cc3f13d873f2be71507b2903c10a08eebb94471fb46b24180de0cb80f0f673c |
ShellPilot-0.27.0-arm64.dmg |
73b0d8a5998c3c3378fb1b01e374e0ac1779611879d75d99826ad96659b3c9ad |
ShellPilot-0.27.0-portable.exe |
b7677d9ab9bc75484d2c82f4560024260dfc275831484bc90d295725784d7edf |
ShellPilot-0.27.0-setup.exe |
f071c21a1d36c31d87fcf193d31eed9886b4a9414082866eaa5752224a010f30 |
ShellPilot-0.27.0-x64.dmg |
4ab2ce410f65a47bc1f28427f391a3315776075ed0154d58b5251c83e8bdc4a6 |
ShellPilot-0.27.0-x86_64.AppImage |
ba512a6ab6c4a8e8ac1b99ddbe80f3d76702df40a82e19a5c43399ca564dc349 |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Full Changelog: v0.26.0...v0.27.0
0.26.0
First run
These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.
macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:
/usr/bin/xattr -dr com.apple.quarantine /Applications/ShellPilot.appThat clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.
Windows — SmartScreen will warn. Choose More info → Run anyway.
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.26.0-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.26.0-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.26.0-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.26.0-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.26.0-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.26.0-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.26.0-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28116/Mon Sep 7 06:24:32 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.26.0-setup.exeShellPilot-0.26.0-portable.exeShellPilot-0.26.0-x64.dmgShellPilot-0.26.0-arm64.dmgShellPilot-0.26.0-x86_64.AppImageShellPilot-0.26.0-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.26.0-amd64.deb |
0715a67639baa5d269f01af220f53832b5554cf311b2c3a1544c3f79c684c444 |
ShellPilot-0.26.0-arm64.dmg |
287681d6039897010de0ef94cc9221f468d69cf2991ec3e624901a80552c3466 |
ShellPilot-0.26.0-portable.exe |
981b7b541f873b59d49423130d204603950fd578d2ed46ef294555a532bce3c4 |
ShellPilot-0.26.0-setup.exe |
88fb09a0b8e9f2772e1daa5417b819534476947dece95f1aecb7892be4ee3b29 |
ShellPilot-0.26.0-x64.dmg |
0a8b51a6fa4d26434925195497ad6ded54795b051b1973b658c664faf77c13d0 |
ShellPilot-0.26.0-x86_64.AppImage |
b04dfc644b743e4b6033d760ebd2745848df29e5e70671b7814c85b9ac1a438c |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Full Changelog: v0.25.0...v0.26.0
0.25.0
First run
These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.
macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:
/usr/bin/xattr -dr com.apple.quarantine /Applications/ShellPilot.appThat clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.
Windows — SmartScreen will warn. Choose More info → Run anyway.
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.25.0-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.25.0-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.25.0-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.25.0-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.25.0-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.25.0-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.25.0-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28116/Mon Sep 7 06:24:32 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.25.0-setup.exeShellPilot-0.25.0-portable.exeShellPilot-0.25.0-x64.dmgShellPilot-0.25.0-arm64.dmgShellPilot-0.25.0-x86_64.AppImageShellPilot-0.25.0-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.25.0-amd64.deb |
2dd6f13694903f49b7e18894f48dfd70a7eba4c1d7739e27977218c8ac24eb0e |
ShellPilot-0.25.0-arm64.dmg |
afcc4c919ec0eae722f1d66c7a70eb901b93158d194d168cfdadf91296165bf1 |
ShellPilot-0.25.0-portable.exe |
a28093d0a116b6ea3556b43f3d78a6f9ab76d734d13cbb26c06df7f25a28e30f |
ShellPilot-0.25.0-setup.exe |
fb758830adfff77a4781415daf275ca5a54011003e6da68ca1811f4906dd49b4 |
ShellPilot-0.25.0-x64.dmg |
5618b3b524c54ab28a6a42598f01b3be1d31806d2d4b122b84227f04cbc53e0a |
ShellPilot-0.25.0-x86_64.AppImage |
22b8a5c1f0c82febecf1a2450de7e3254f53f4416f5e466fc4fbbe44b0775806 |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Full Changelog: v0.24.0...v0.25.0
0.24.0
First run
These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.
macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:
/usr/bin/xattr -dr com.apple.quarantine /Applications/ShellPilot.appThat clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.
Windows — SmartScreen will warn. Choose More info → Run anyway.
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.24.0-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.24.0-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.24.0-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.24.0-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.24.0-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.24.0-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.24.0-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28116/Mon Sep 7 06:24:32 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.24.0-setup.exeShellPilot-0.24.0-portable.exeShellPilot-0.24.0-x64.dmgShellPilot-0.24.0-arm64.dmgShellPilot-0.24.0-x86_64.AppImageShellPilot-0.24.0-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.24.0-amd64.deb |
51b70def708d48b7740ece2ed3c2544624a1536d02b795a2f6a6169243a9c4a2 |
ShellPilot-0.24.0-arm64.dmg |
d996f7c1cf5a70e43a6eeba7a6c06ba4e02b45a8ca00bfa52b8551c2cb04f729 |
ShellPilot-0.24.0-portable.exe |
6c95996a1a6db689ee3041df9236d963795a8d76a6b03bd9e9fcf0428550e49e |
ShellPilot-0.24.0-setup.exe |
09cde02a65d7a16ec9f0cb652313b69522665e788a2d702554ffe515bdd066e8 |
ShellPilot-0.24.0-x64.dmg |
7ccf92d005cf6bef173c0ef27f181930a5791d944a89a0e2ed8aeedbca832a35 |
ShellPilot-0.24.0-x86_64.AppImage |
3af155ca8f262504de763d914a956e8660ea9abc9fb76094ba0bec1ed474ecd5 |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Full Changelog: v0.23.0...v0.24.0
0.23.0
First run
These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.
macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:
/usr/bin/xattr -dr com.apple.quarantine /Applications/ShellPilot.appThat clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.
Windows — SmartScreen will warn. Choose More info → Run anyway.
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.23.0-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.23.0-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.23.0-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.23.0-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.23.0-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.23.0-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.23.0-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28116/Mon Sep 7 06:24:32 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.23.0-setup.exeShellPilot-0.23.0-portable.exeShellPilot-0.23.0-x64.dmgShellPilot-0.23.0-arm64.dmgShellPilot-0.23.0-x86_64.AppImageShellPilot-0.23.0-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.23.0-amd64.deb |
8f4f1829be325b520db5ccf17d4276d2b1245e2682ddc1183a10e0e3500f1823 |
ShellPilot-0.23.0-arm64.dmg |
aae892d30447de75009bca143b97d79eef539d876660ae18f6a0a00b9dc32f64 |
ShellPilot-0.23.0-portable.exe |
fe3746e5f86cc0873a8eb5607223d6b0bfa90ea53d44a75ccf4a55a560a93fa9 |
ShellPilot-0.23.0-setup.exe |
f0263ed8f36283bf4f6a82f7008571f73a8d4465636321c37d6bc3904ebf5c54 |
ShellPilot-0.23.0-x64.dmg |
c3a5d3255572cb94132e32bb993b8ec27fc0696294b8bef3f638d8a0f2734a5f |
ShellPilot-0.23.0-x86_64.AppImage |
a2d59dc753ce83686ef88a9ccaf3508f7a66f0c6551e578b74c5e0007f1a3d59 |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Full Changelog: v0.22.3...v0.23.0
0.22.3
First run
These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.
macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:
/usr/bin/xattr -dr com.apple.quarantine /Applications/ShellPilot.appThat clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.
Windows — SmartScreen will warn. Choose More info → Run anyway.
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.22.3-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.22.3-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.22.3-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.22.3-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.22.3-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.22.3-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.22.3-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28116/Mon Sep 7 06:24:32 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.22.3-setup.exeShellPilot-0.22.3-portable.exeShellPilot-0.22.3-x64.dmgShellPilot-0.22.3-arm64.dmgShellPilot-0.22.3-x86_64.AppImageShellPilot-0.22.3-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.22.3-amd64.deb |
5833aeb38c009dac2b1238ff4dcebbc78ce066b48096c5ce001de6179569bb1d |
ShellPilot-0.22.3-arm64.dmg |
e352066cf766e68ceafb6ed121f489a751f5e601adf6d44c37d5941271bbaf76 |
ShellPilot-0.22.3-portable.exe |
f3695194226fae2cace1183cee34a9b182923d26e0f7144d98a8563c4976fc42 |
ShellPilot-0.22.3-setup.exe |
7ce45bf9e8da6001adac18c264eb5b9997c7b594b3a058ebe6fafd270766b7f4 |
ShellPilot-0.22.3-x64.dmg |
4c6b8951e4215bfd1140ed7c31f4a7d473518f18dc3c5c95f6704c15aa4921fb |
ShellPilot-0.22.3-x86_64.AppImage |
4afdde9050782decebb142bfdd22ac33cb7364cf4547234ebb2e2b5aff50ea18 |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Full Changelog: v0.22.2...v0.22.3
0.22.2
First run
These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.
macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:
/usr/bin/xattr -dr com.apple.quarantine /Applications/ShellPilot.appThat clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.
Windows — SmartScreen will warn. Choose More info → Run anyway.
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.22.2-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.22.2-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.22.2-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.22.2-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.22.2-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.22.2-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.22.2-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28116/Mon Sep 7 06:24:32 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.22.2-setup.exeShellPilot-0.22.2-portable.exeShellPilot-0.22.2-x64.dmgShellPilot-0.22.2-arm64.dmgShellPilot-0.22.2-x86_64.AppImageShellPilot-0.22.2-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.22.2-amd64.deb |
1d42ef4600d189dc1956f041f8a2631f14d5baa4673dd25c686b576babed6957 |
ShellPilot-0.22.2-arm64.dmg |
0d747dc4bc246f79e25807eeef7e1d5d0161f1abab53db47a737c8e4eb5c4b3f |
ShellPilot-0.22.2-portable.exe |
96b267d437adddc3e5d571d063dcd6148cdb63ad71a0f07ba48e3022bb8c3783 |
ShellPilot-0.22.2-setup.exe |
97ffe90af2f86ab911b2dd00f3733f19e1454dfb759880854190989b9295b9a8 |
ShellPilot-0.22.2-x64.dmg |
15bdc42dc4c31556841ffd1f00a8b7f9c5e95d1c60b12f93a329388f3f71ae53 |
ShellPilot-0.22.2-x86_64.AppImage |
61d24655eae75f7742b0ee55c3c0ccfe452b6d287db49c58fdcd829d73568819 |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Full Changelog: v0.22.1...v0.22.2