First run
These builds are not signed with a paid Apple or Microsoft certificate, so
both systems stop you the first time. Neither message is a finding about
this file — every installer's SHA-256 is under Checksums.
macOS — you will be told the app is "damaged". It is not. macOS shows
that exact wording for any app it cannot trace to a paid Apple Developer ID,
and the dialog's only obvious button moves it to the Trash. Do not use it.
On macOS 15 (Sequoia) and later there is no right-click → Open bypass; Apple
removed it. Drag the app to Applications, then either open
System Settings → Privacy & Security and click Open Anyway, or run:
/usr/bin/xattr -dr com.apple.quarantine /Applications/OpsMaxx.appThat clears the download flag and nothing else — the app's signature stays
intact and verifiable with codesign --verify --strict --deep. The full
path is deliberate: a Homebrew or pip xattr earlier on your PATH may not
support -r.
Windows — SmartScreen will warn. Choose More info → Run anyway.
Downloads
Windows
| File | Notes |
|---|---|
OpsMaxx-0.48.0-setup.exe
| Installer with desktop and Start-menu shortcuts. Pick this one if unsure. |
OpsMaxx-0.48.0-portable.exe
| Single file, no install, keeps its data beside the .exe — runs from a USB stick
|
macOS
| File | Notes |
|---|---|
OpsMaxx-0.48.0-arm64.dmg
| Apple Silicon (M1 and later) |
OpsMaxx-0.48.0-x64.dmg
| Intel Macs |
Linux
| File | Notes |
|---|---|
OpsMaxx-0.48.0-x86_64.AppImage
| Any distribution — chmod +x and run
|
OpsMaxx-0.48.0-amd64.deb
| Debian and Ubuntu — sudo apt install ./OpsMaxx-0.48.0-amd64.deb
|
Source for the bundled OpenVPN
OpsMaxx bundles OpenVPN on macOS and Linux. OpenVPN is GPL-2.0, so the
corresponding source for the exact build in these installers is published
here as openvpn-2.6.22-source.tar.gz — the pinned upstream commit,
unmodified, with its SHA-256 in the table below. scripts/build-openvpn.sh
in this repository is the recipe that turns it into the shipped binary.
Antivirus scan
These builds are unsigned, so every release is scanned before publishing.
| Scanner | Result |
|---|---|
| Microsoft Defender (Windows runner) | no threats found (defs 1.459.242.0, 20 files, cloud High) |
ClamAV ClamAV 1.5.3/28125/Wed Sep 16 06:24:23 2026
| clean |
| VirusTotal (70+ engines) | per-file reports below |
OpsMaxx-0.48.0-setup.exeOpsMaxx-0.48.0-portable.exeOpsMaxx-0.48.0-x64.dmgOpsMaxx-0.48.0-arm64.dmgOpsMaxx-0.48.0-x86_64.AppImageOpsMaxx-0.48.0-amd64.deb
One or two detections from minor engines are normal for an unsigned
Electron installer. Verify the SHA-256 of what you downloaded against
the value listed below, or build from source.
Checksums
These are the whole reason an unsigned build is still safe to trust: they
prove the file you have is the file this workflow built. Check yours before
running it.
shasum -a 256 <file> # macOS, Linux
certutil -hashfile <file> SHA256 # Windows| File | SHA-256 |
|---|---|
OpsMaxx-0.48.0-amd64.deb
| 5b82550fba87f70696ccef3f3cf38f59100425299bfd61db540d911983fcafa9
|
OpsMaxx-0.48.0-arm64.dmg
| 368aed31c38a88378413524d8bcbb82ae79d95ba149c09df6ecc8aa39606cd4e
|
OpsMaxx-0.48.0-portable.exe
| 8ff5c0382427960a36c518deda2d1f04ec22f1c79211f4f52bc030eea619ece9
|
OpsMaxx-0.48.0-setup.exe
| d4a54a620b3f191c6f94ac7940dcd543049a2c25754a63287125f807d198cc29
|
OpsMaxx-0.48.0-x64.dmg
| 7b3bd4e89576cbeae6b4b8251974488e874335b90a2856a801f17235f679fa5c
|
OpsMaxx-0.48.0-x86_64.AppImage
| cfa871d92a4bcaa7cb2d48d46b04f8a0897e2d5b77cb2fa20f0b012def33c30a
|
openvpn-2.6.22-source.tar.gz
| e0eac30be2308340564507f056a0090e467c5e78ac80d64a6604cbfbe1a8aa48
|
The .blockmap files are build metadata, not downloads — they describe
binary deltas between versions and are only read by an updater. The source
archives are a snapshot of the repository, not a build.
Full Changelog: v0.47.0...v0.48.0