Review of "CodexBar" version 16

Details Page Preview

Show AI provider usage metrics in the GNOME panel. Based on codexbar by @steipete. Tracks usage limits for Codex (ChatGPT), Claude, Gemini CLI, Ollama Cloud, Copilot, DeepSeek, OpenRouter, Perplexity and Mistral. Enjoy it! If you have any error or problem, tell us on Github and our discord telegram and matrix

Extension Homepage
https://github.com/InledGroup/codexbar-gnome

No comments.

Diff Against

Files

Note: Binary files aren't shown on the web site. To see all files, please download the extension zipfile.

Shexli (experimental) manual_review 1

Shexli found 1 issue that may need reviewer attention.

EGO-A-005 manual_review

extensions should not access the clipboard directly

Direct clipboard access via `St.Clipboard.get_default()` requires reviewer scrutiny.

Review Guidelines

  • extension.js:774
    St.Clipboard.get_default()

All Versions

Previous Reviews on this Version

Inled Group posted a review
hello! I uploaded this quickly because in local shexli it didn't give me an error but when uploading it gave me that it was missing due to deactivating a clipboard loop so I solved it quickly. For antigravity usage, I have added that a shim must be installed that makes antigravity's auto-generated certificate trusted so that codexbar-cli (the backend it uses) can accept the query.
JustPerfection rejected
1. Not needed to send curl and sudo package installation notification in both `extension.js` and `prefs.js`. If there is a dependency. Sending a message in`prefs.js` would be enough. 2. The fact you are injecting the sensitive data to the env is a security flaw (line 330 `adapters/CliSubprocessFetcher.js`). 3. Not clear what `finalCommand` is (line 344 `adapters/CliSubprocessFetcher.js`). 4. `_setupAntigravitySSL()` in `adapters/CliSubprocessFetcher.js` feels like rootkit behavior. 5. What is the URL in line 112 `prefs.js`?