Show AI provider usage metrics in the GNOME panel. Based on Codexbar by @steipete. Featured on the official Codexbar repo.
Note: Binary files aren't shown on the web site. To see all files, please download the extension zipfile.
EGO-A-005 manual_review
extensions should not access the clipboard directly
Direct clipboard access via `St.Clipboard.get_default()` requires reviewer scrutiny.
CodexBar | AI Usage
extension.js:774
St.Clipboard.get_default()
| Version | Status |
|---|---|
| 20 | Active |
| 19 | Rejected |
| 18 | Active |
| 17 | Rejected |
| 16 | Rejected |
| 15 | Rejected |
| 14 | Rejected |
| 13 | Active |
| 12 | Rejected |
| 11 | Inactive |
| 10 | Rejected |
| 9 | Rejected |
| 8 | Inactive |
| 7 | Inactive |
| 6 | Inactive |
| 5 | Rejected |
| 4 | Inactive |
| 3 | Inactive |
| 2 | Rejected |
| 1 | Inactive |
hello! I uploaded this quickly because in local shexli it didn't give me an error but when uploading it gave me that it was missing due to deactivating a clipboard loop so I solved it quickly. For antigravity usage, I have added that a shim must be installed that makes antigravity's auto-generated certificate trusted so that codexbar-cli (the backend it uses) can accept the query.
1. Not needed to send curl and sudo package installation notification in both `extension.js` and `prefs.js`. If there is a dependency. Sending a message in`prefs.js` would be enough. 2. The fact you are injecting the sensitive data to the env is a security flaw (line 330 `adapters/CliSubprocessFetcher.js`). 3. Not clear what `finalCommand` is (line 344 `adapters/CliSubprocessFetcher.js`). 4. `_setupAntigravitySSL()` in `adapters/CliSubprocessFetcher.js` feels like rootkit behavior. 5. What is the URL in line 112 `prefs.js`?