0.6.1
Downloads
Windows
| File | Notes |
|---|---|
ShellPilot-0.6.1-setup.exe |
Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
ShellPilot-0.6.1-portable.exe |
Single file, no install, keeps its data beside the .exe — runs from a USB stick |
macOS
| File | Notes |
|---|---|
ShellPilot-0.6.1-arm64.dmg |
Apple Silicon (M1 and later) |
ShellPilot-0.6.1-x64.dmg |
Intel Macs |
Linux
| File | Notes |
|---|---|
ShellPilot-0.6.1-x86_64.AppImage |
Any distribution — chmod +x and run |
ShellPilot-0.6.1-amd64.deb |
Debian and Ubuntu — sudo apt install ./ShellPilot-0.6.1-amd64.deb |
Source for the bundled OpenVPN
ShellPilot bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found |
ClamAV ClamAV 1.5.3/28109/Mon Aug 31 06:24:07 2026 |
clean |
| VirusTotal (70+ engines) | per-file reports below |
ShellPilot-0.6.1-setup.exeShellPilot-0.6.1-portable.exeShellPilot-0.6.1-x64.dmgShellPilot-0.6.1-arm64.dmgShellPilot-0.6.1-x86_64.AppImageShellPilot-0.6.1-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
ShellPilot-0.6.1-amd64.deb |
5035cdb3498d140fb4662b4a3543539fad4eadcf6bd49e620b0bd39e4e294ef3 |
ShellPilot-0.6.1-arm64.dmg |
16ff1d8a7911a181bb88056d9c38687dd9989b83bf082218bcebc54031ac42a9 |
ShellPilot-0.6.1-portable.exe |
92a67a081f11a27210854f1497d07f26b2c9fe5ac2b63c65ffe38848be581ef0 |
ShellPilot-0.6.1-setup.exe |
8ce61c50b46aca7d3b02b7088b785a94fa0df26a20d5f001fdfe85ed1248ee37 |
ShellPilot-0.6.1-x64.dmg |
8c9de44b8c611d0dacb9108f3b2800f9bc94d2fe9eda63adb25f405c62f541b4 |
ShellPilot-0.6.1-x86_64.AppImage |
2c49e2e36043aa64a7df227f324b15ec3add8e3d9f6f07371489f5ae7a84eb3c |
openvpn-2.6.22-source.tar.gz |
e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48 |
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Builds are not notarized — the macOS apps are ad-hoc signed, the Windows
ones unsigned. SmartScreen will warn on first run — choose More info → Run
anyway. On macOS, first run only: right-click the app → Open, or go to
System Settings → Privacy & Security and click Open Anyway. If you would
rather use the Terminal, /usr/bin/xattr -cr /Applications/ShellPilot.app clears
the quarantine flag (spelt with the full path, because a Homebrew or pip xattr
earlier on your PATH may not support -r). Every installer's SHA-256 is
listed under Checksums above, which is the strongest integrity check available
here.
What's Changed
- Release 0.6.1: vault orphan on cancel, and a test timeout that hid a flake by @ZeeshanSultan in #17
Full Changelog: v0.6.0...v0.6.1
